Record · corpus.blog/posts/01a08c56-2f31-72e6-875e-3ccaed755c34

How to protect yourself from npm

Timo Tijhof · published 12 September 2019

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at timotijhof.net Wayback capture

0blogs citing

First cited: —
Most recent: —
Rank this month: not ranked
Links from this post: 35
Words captured: 1,488

Cited by

No blog we hold has cited this post yet.

Links from this post

Link

Host

https://commons.wikimedia.org/wiki/File:BlueSkyCCTV13.jpg

commons.wikimedia.org

https://commons.wikimedia.org/wiki/File:Family_Computer_(6914313766

commons.wikimedia.org

https://commons.wikimedia.org/wiki/File:Louis_XIV_with_a_red_mask,_Paris_20_August_2015.jpg

commons.wikimedia.org

https://medium.com/bugbountywriteup/zoom-zero-day-4-million-webcams-maybe-an-rce-just-get-them-to-visit-your-website-ac75c83f4ef5

medium.com

https://pypi.org

pypi.org

https://packagist.org/statistics

packagist.org

https://blog.npmjs.org/post/180868064080/this-year-in-javascript-2018-in-review-and-npms

blog.npmjs.org

How much do we really know about how packages behave on the npm registry? Read at the source ↗

snyk.io

http://npm.broofa.com/?q=eslint@6.3.0

npm.broofa.com

http://npm.broofa.com/?q=@11ty/eleventy@0.9.0

npm.broofa.com

npm Install Hook Scripts: Intro (Part 1) Read at the source ↗

blog.alexwendland.com

https://commons.wikimedia.org/wiki/Category:Wikimedia_servers_in_Carrollton

commons.wikimedia.org

https://github.com/wikimedia/fresh

github.com

https://github.com/wikimedia/fresh/blob/19.10.1/Tutorial.md

github.com

https://wiki.archlinux.org/index.php/Systemd-nspawn

wiki.archlinux.org

https://github.com/qunitjs/qunit/issues/1342

github.com

https://cgbystrom.com/posts/deconstructing-spotifys-builtin-http-server/

cgbystrom.com

https://www.idontplaydarts.com/2016/04/detecting-curl-pipe-bash-server-side/

idontplaydarts.com

Malicious code found in npm package event-stream downloaded 8 million times in the past 2.5 months Read at the source ↗

snyk.io

https://jakearchibald.com/2018/when-packages-go-bad/

jakearchibald.com

https://scribe.rip/im-harvesting-credit-card-numbers-and-passwords-from-your-site-here-s-how-9a8cb347c5b5

scribe.rip

https://scribe.rip/npm-package-permissions-an-idea-441a02902d9b

scribe.rip

https://blog.mozilla.org/security/2019/10/09/iterm2-critical-issue-moss-audit/

blog.mozilla.org

https://scribe.rip/12-strange-things-that-can-happen-after-installing-an-npm-package-45de7fbf39f0

scribe.rip

https://news.sophos.com/en-us/2019/07/15/apple-quietly-removes-zooms-hidden-web-server-from-macs/

news.sophos.com

https://scribe.rip/zoom-zero-day-4-million-webcams-maybe-an-rce-just-get-them-to-visit-your-website-ac75c83f4ef5

scribe.rip

https://sambleckley.com/writing/npm.html

sambleckley.com

https://www.mediawiki.org/wiki/Wikimedia_Developer_Summit/2018/Participants/Tim_Starling

mediawiki.org

npm audit: Broken by Design Read at the source ↗

overreacted.io

Why you should check-in your node dependencies Read at the source ↗

jackfranklin.co.uk

https://sizeof.cat/post/coa-npm-with-malicious-code/

sizeof.cat

https://socket.dev/blog/inside-node-modules

socket.dev

https://old.reddit.com/r/Python/comments/uwhzkj/i_think_the_ctx_package_on_pypi_has_been_hacked/

old.reddit.com

We’re drowning Read at the source ↗

snarfed.org

https://blog.jim-nielsen.com/2023/software-crisis-dependencies/

blog.jim-nielsen.com