56,966 blogs · 4,417,066 posts Claim your blog

Record · corpus.blog/posts/01a08755-da59-71fc-a0e4-6d0b52391054

Package Managers and Security

blog.vnaik.com · published 17 April 2019

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at blog.vnaik.com Wayback capture

0blogs citing

First cited: —
Most recent: —
Rank this month: not ranked
Links from this post: 17
Words captured: 972

Cited by

No blog we hold has cited this post yet.

Links from this post

Link

Host

Typosquatting programming language package managers Read at the source ↗

incolumitas.com

https://www.lucidchart.com/techblog/2017/03/15/package-management-stop-using-version-ranges/

lucidchart.com

https://www.owasp.org/images/f/f8/OWASP_Top_10_-_2013.pdf

owasp.org

https://github.com/nodesecurity/nsp

github.com

https://github.com/rubysec/bundler-audit

github.com

https://dependabot.com/

dependabot.com

https://docs.npmjs.com/cli/audit

docs.npmjs.com

https://dependabot.com/blog/hello-github/

dependabot.com

https://twitter.com/o_cee/status/892306836199800836

twitter.com

http://www.drinchev.com/blog/alert-npm-modules-hijacked/

drinchev.com

https://news.ycombinator.com/item?id=14902630

news.ycombinator.com

https://www.bleepingcomputer.com/news/security/52-percent-of-all-javascript-npm-packages-could-have-been-hacked-via-weak-credentials/

bleepingcomputer.com

https://news.ycombinator.com/item?id=14901566

news.ycombinator.com

https://arstechnica.com/information-technology/2017/09/devs-unknowingly-use-malicious-modules-put-into-official-python-repository/

arstechnica.com

https://a9t9.com/blog/chrome-extension-adware/

a9t9.com

https://www.zdnet.com/article/zero-day-in-popular-jquery-plugin-actively-exploited-for-at-least-three-years/

zdnet.com

https://withatwist.dev/strong-password-rubygem-hijacked.html

withatwist.dev