corpus.blog
41554 blogs · 4,417,066 posts Claim your blog
Record · corpus.blog/posts/01a087e3-ecb3-70e2-9564-2bd6d13da9cc

Supply Chain Pollution: Hunting a 16 Million Download/Week npm Package Vulnerability for a CTF Challenge

spaceraccoon.dev · published 23 December 2020

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at spaceraccoon.dev Wayback capture
0blogs citing
First cited
—
Most recent
—
Rank this month
not ranked
Links from this post
14
Words captured
1,738

Cited by

No blog we hold has cited this post yet.

Links from this post

Link
Host
https://ctf.tech.gov.sg/
ctf.tech.gov.sg
https://blog.npmjs.org/post/180565383195/details-about-the-event-stream-incident
blog.npmjs.org
Malicious code found in npm package event-stream downloaded 8 million times in the past 2.5 months Read at the source ↗
snyk.io
https://www.blackhat.com/asia-19/arsenal/schedule/index.html
blackhat.com
https://portswigger.net/daily-swig/prototype-pollution-the-dangerous-and-underrated-vulnerability-impacting-javascript-applications
portswigger.net
https://securitylab.github.com/tools/codeql
securitylab.github.com
New helper added: grep.app – Search across git repos.. Read at the source ↗
grep.app
https://snyk.io/vuln/SNYK-JS-DOTPROP-543489
snyk.io
https://snyk.io/vuln/SNYK-JS-INIPARSER-564122
snyk.io
https://hackerone.com/nodejs-ecosystem?type=team
hackerone.com
https://snyk.io/vulnerability-disclosure/
snyk.io
https://snyk.io/vuln/SNYK-JS-INI-1048974
snyk.io
https://snyk.io/advisor/npm-package/ini
snyk.io
https://quanyang.github.io/stack-2020-final-countdown
quanyang.github.io