Record · corpus.blog/posts/01a08755-6cec-7047-89b4-0d3d22a46f8c

What is a backdoor? Let’s build one with Node.js

snyk.io · published 19 March 2020

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at snyk.io Wayback capture

0blogs citing

First cited: —
Most recent: —
Rank this month: not ranked
External links: 28
Words captured: 1,374

Cited by

No blog we hold has cited this post yet.

Links from this post

Link

Host

Typosquatting programming language package managers Read at the source ↗

incolumitas.com

https://blog.npmjs.org/post/180565383195/details-about-the-event-stream-incident

blog.npmjs.org

https://www.malwarebytes.com/backdoor/

malwarebytes.com

https://nodejs.org/api/child_process.html

nodejs.org

https://www.npmjs.com/package/express

npmjs.com

https://snyk.io/signup/

snyk.io

http://browsehappy.com/

browsehappy.com

https://www.npmjs.com/package/browser-redirect

npmjs.com

https://snyk.io/learn/malicious-code/

snyk.io

https://www.shodan.io/search?query=%22Content-Sec-Policy%3A+default-src+%27self%27%22

shodan.io

https://github.com/UlisesGascon/browser-redirect/tree/master

github.com

https://github.com/UlisesGascon/browser-redirect/releases/tag/v1.0.2

github.com

A post-mortem of the malicious event-stream backdoor Read at the source ↗

snyk.io

Why npm lockfiles can be a security blindspot for injecting malicious modules Read at the source ↗

snyk.io

https://status.npmjs.org/incidents/dn7c1fgrr7ng

status.npmjs.org

https://blog.npmjs.org/post/188234999089/new-security-insights-api-sneak-peek

blog.npmjs.org

https://github.com/npm/cli/blob/latest/docs/content/using-npm/scripts.md

github.com

https://github.com/puppeteer/puppeteer/blob/master/package.json

github.com

https://github.com/puppeteer/puppeteer/blob/master/install.js

github.com

https://youtu.be/M3BM9TB-8yA?t=362

youtu.be

https://snyk.io/learn/node-js-licensing-and-security-risks/

snyk.io

https://snyk.io/open-source-security-report/

snyk.io

https://www.npmjs.com/package/npq

npmjs.com

Snyk CLI cheat sheet Read at the source ↗

snyk.io

Malicious remote code execution backdoor discovered in the popular bootstrap-sass Ruby gem Read at the source ↗

snyk.io

https://snyk.io/vuln/SNYK-RUBY-RESTCLIENT-459900/

snyk.io

https://hub.packtpub.com/a-year-old-webmin-backdoor-revealed-at-def-con-2019-allowed-unauthenticated-attackers-to-execute-commands-with-root-privileges-on-servers/

hub.packtpub.com

https://www.youtube.com/watch?v=2cyib2MgvdM

youtube.com