btaf45@lemmy.world to Technology@lemmy.worldEnglish · 2 days agoHundreds of code libraries posted to NPM try to install malware on dev machinesarstechnica.comexternal-linkmessage-square35fedilinkarrow-up1242arrow-down12cross-posted to: programming@programming.devpulse_of_truth@infosec.pubcybersecurity@sh.itjust.works
arrow-up1240arrow-down1external-linkHundreds of code libraries posted to NPM try to install malware on dev machinesarstechnica.combtaf45@lemmy.world to Technology@lemmy.worldEnglish · 2 days agomessage-square35fedilinkcross-posted to: programming@programming.devpulse_of_truth@infosec.pubcybersecurity@sh.itjust.works
minus-squarebokherif@lemmy.worldlinkfedilinkEnglisharrow-up18·2 days agoYou’d be surprised to see how many common libraries have vulnerabilities every week.
minus-squareTheInternetIsForLargeShrimp@lemmynsfw.comlinkfedilinkEnglisharrow-up11·2 days agoAs well as how many common JS libraries, while not malicious have no business existing (ex. IsEven).
You’d be surprised to see how many common libraries have vulnerabilities every week.
As well as how many common JS libraries, while not malicious have no business existing (ex. IsEven).