btaf45@lemmy.world to Technology@lemmy.worldEnglish · 4 days agoHundreds of code libraries posted to NPM try to install malware on dev machinesarstechnica.comexternal-linkmessage-square35fedilinkarrow-up1249arrow-down12cross-posted to: programming@programming.devcybersecurity@sh.itjust.workspulse_of_truth@infosec.pub
arrow-up1247arrow-down1external-linkHundreds of code libraries posted to NPM try to install malware on dev machinesarstechnica.combtaf45@lemmy.world to Technology@lemmy.worldEnglish · 4 days agomessage-square35fedilinkcross-posted to: programming@programming.devcybersecurity@sh.itjust.workspulse_of_truth@infosec.pub
minus-squarebokherif@lemmy.worldlinkfedilinkEnglisharrow-up18·4 days agoYou’d be surprised to see how many common libraries have vulnerabilities every week.
minus-squareTheInternetIsForLargeShrimp@lemmynsfw.comlinkfedilinkEnglisharrow-up11·3 days agoAs well as how many common JS libraries, while not malicious have no business existing (ex. IsEven).
You’d be surprised to see how many common libraries have vulnerabilities every week.
As well as how many common JS libraries, while not malicious have no business existing (ex. IsEven).