Node.js: Updated versions patch high-risk security vulnerabilities
Node.js: Updated versions patch high-risk security vulnerabilities
2 个月之前
heise.de
Hundreds of code libraries posted to NPM try to install malware on dev machines
Hundreds of code libraries posted to NPM try to install malware on dev machines
2024年11月4日
arstechnica.com
JavaScript Validator | Powered By Snyk Code | Snyk
JavaScript Validator | Powered By Snyk Code | Snyk
2021年11月3日
snyk.io
Hackers are disguising their malicious JavaScript code with a hard-to-beat trick
19:06
Hackers are disguising their malicious JavaScript code with a hard-to-beat trick
2021年10月6日
zdnet.com
How to block malicious JavaScript files in Windows environments
How to block malicious JavaScript files in Windows environments
2020年12月30日
csoonline.com
Node.js Ransomware
Node.js Ransomware
2021年9月20日
pcrisk.com
Creating a Secure Node js REST API in 4 Easy Steps | Hevo
Creating a Secure Node js REST API in 4 Easy Steps | Hevo
2024年7月14日
hevodata.com
10 malicious Python packages exposed in latest repository attack
2022年8月9日
arstechnica.com
8:21
Malicious VS Code, Go, npm, and Rust Packages Exposed: How Dev Data Is Stolen
已浏览 6 次4 个月之前
YouTubeDiverse Voices
2:48
Axios Hack 🚨 Malicious npm Versions
已浏览 60 次1 周前
YouTubeSaad Saleem
0:36
hasOwnProperty Security Bug Crashes Servers 💥
已浏览 108 次3 周前
YouTubecodingshorter
20:12
Node.js Inside: Understanding the Runtime in Production with Estefany Aguilar #JSCONF2026
已浏览 9316 次2 周前
YouTubemidudev
8:44
140,000 Developers Hit by npm Malware 😳
已浏览 1 次3 周前
YouTubeMrKnowledgeShare
0:32
Node.js Typo-Squatting Attack 2025: Malware in Fake Libraries Steals Developer Secrets
已浏览 1145 次1 个月前
YouTubeLucky Tech
6:27
Destructuring the Bypass: How Hackers Evaded the n8n Security Patch (CVE-2026-25049) #cybersecurity
1 周前
YouTubeCybertech
3:35
npm Attack Explained: Axios Was Compromised Without Code Changes
1 周前
YouTubeyash
9:39
Axios Supply Chain Attack: Hidden RAT in 45M Weekly Downloads
已浏览 541 次1 周前
YouTubeIT SPARC Cast
0:12
If you use Axios stop what you're doing and check your dependencies right now 👇83 million weekly downloads. one of the most used packages in javascript. just got hit by a supply chain attack:- versions 1.14.1 and 0.30.4 were published using the maintainer's stolen npm credentials- both versions inject a malicious dependency: plain-crypto-js@4.2.1- no GitHub tags exist for either version. CI/CD pipeline completely bypassed.- malicious package published at 23:59 UTC. compromised Axios versions li
已浏览 87 次1 周前
x.comBits & Atoms
0:09
🚨CRITICAL: Axios got hacked. here's what happened:→ attacker hijacked a lead maintainer's npm account → swapped the email to an anonymous protonmail→ bypassed GitHub Actions entirely → manually pushed axios@1.14.1 via npm CLIthe malicious version injects plain-crypto-js@4.2.1 a package that didn't exist before yesterday.it's a full RAT dropper, one npm install and it:→ runs a postinstall script silently → detects your OS (mac, windows, linux) → downloads a platform-specific payload → deletes it
已浏览 15.8万 次1 周前
x.comPrasenjit
npm: One of JavaScript's most popular libraries compromised by hackers — Axios npm package hit in supply chain attack that deployed a cross-platform RAT
2 周前
rankiteo.com
#bookmystay #bookmystay #bookmystay #webdevelopment #fullstackdeveloper #nodejs #expressjs #joi #formvalidation #errorhandling #learningbydoing #developerjourney | MAYUR KADAM
已浏览 1 次3 个月之前
linkedin.com
3:42
Millions of JS developers just got penetrated by a RAT
6 天之前
MSNFireship
How To Block Malicious Websites In 2026: 8 Best Ways
2020年12月17日
whatvwant.com
8:13
【中配】JavaScript 赢麻了：Node.js 远程 DOS 漏洞详解 - Low Level
已浏览 1648 次2 个月之前
bilibili黑纹白斑马
52:56
Node.js：安全性，保护您的 Node.js 项目【中英字幕】
已浏览 789 次2022年2月21日
bilibiliTheitzy资源网
8:36
Node.js 里有一个远程拒绝服务（DOS）漏洞 - JavaScript 势不可挡 | Low Level
已浏览 209 次2 个月之前
bilibili一摩尔炸鸡翅
26:13
Using MySQL With Node.js
已浏览 54.1万 次2017年7月20日
YouTubeTraversy Media
15:04
Running a XSS Attack + How to defend
已浏览 19.1万 次2020年7月16日
YouTubeAcademind
10:44
JavaScript Malware - How bad can it be?
已浏览 2.9万 次2021年6月15日
YouTubecybercdh
展开