How to protect yourself from npm – Timo Tijhof

Linking pages

An Internet of PHP – Timo Tijhof https://timotijhof.net/posts/2023/an-internet-of-php/ 348 comments
How to protect yourself from npm. What’s the worst that could happen… | by Timo Tijhof | Medium https://medium.com/@timotijhof/how-to-protect-yourself-from-vulnerable-npm-packages-c03f85249651 0 comments

Linked pages

Zoom Zero Day: 4+ Million Webcams & maybe an RCE? Just get them to visit your website! | by Jonathan Leitschuh | InfoSec Write-ups https://medium.com/@jonathan.leitschuh/zoom-zero-day-4-million-webcams-maybe-an-rce-just-get-them-to-visit-your-website-ac75c83f4ef5 789 comments
Detecting the use of "curl | bash" server side | Application Security https://www.idontplaydarts.com/2016/04/detecting-curl-pipe-bash-server-side/ 722 comments
Worrying about the NPM ecosystem | Sam Bleckley https://sambleckley.com/writing/npm.html 374 comments
PyPI · The Python Package Index https://pypi.org 261 comments
I’m harvesting credit card numbers and passwords from your site. Here’s how. | by David Gilbertson | Medium https://medium.com/hackernoon/im-harvesting-credit-card-numbers-and-passwords-from-your-site-here-s-how-9a8cb347c5b5 255 comments
Critical Security Issue identified in iTerm2 as part of Mozilla Open Source Audit - Mozilla Security Blog https://blog.mozilla.org/security/2019/10/09/iterm2-critical-issue-moss-audit/ 156 comments
What happens when packages go bad? - JakeArchibald.com https://jakearchibald.com/2018/when-packages-go-bad/ 122 comments
How much do we really know about how packages behave on the npm registry? | Snyk https://snyk.io/blog/how-much-do-we-really-know-about-how-packages-behave-on-the-npm-registry/ 10 comments
Malicious code found in npm package event-stream downloaded 8 million times in the past 2.5 months | Snyk https://snyk.io/blog/malicious-code-found-in-npm-package-event-stream 0 comments
npm Blog Archive: This year in JavaScript: 2018 in review and npm’s predictions for 2019 https://blog.npmjs.org/post/180868064080/this-year-in-javascript-2018-in-review-and-npms 0 comments
Carl BystrÃ¶m http://cgbystrom.com/articles/deconstructing-spotifys-builtin-http-server/ 0 comments