Blogs

Hardcoded secrets, unverified tokens, and other common JWT mistakes

Semgrep

Hardcoded secrets, unverified tokens, and other common JWT mistakes Examining 2,000+ npm modules for common mistakes when using JWT Vasilii Ermilov June 19 th, 2020 JWT (JSON Web Token) is an open standard (RFC 7519) that defines a way to provide information within a JSON object between two parties.

Visit Site

Sha1-Hulud: The Second Coming of the NPM Worm is Digging For SecretsSemgrep Secrets Story: The Prefixed Secrets That Tried%20to%2BGet\nAwaySemgrep London calling: Highlights from the 2025 cloud & cyber security expoSemgrep Boosting Security Scan Performance for Monorepos with Multicore Parallel ProcessingSemgrep Beyond Benchmarks: How Semgrep Redefines Javascript SecuritySemgrep Benchmarking Semgrep Community Edition Performance ImprovementsSemgrep Breaking down common documentation mistakesMintlify Format text - MintlifyMintlify Calling Your Video Game With Your Phone: Part 1Deepgram The 8 Best HubSpot Alternatives in 2026Zapier Pulumi ESC and External Secrets Operator: The Perfect Solution for TodayPulumi How We Eliminated Long-Lived CI Secrets Across 70+ ReposPulumi Pulumi Neo Now Supports AGENTS.mdPulumi Pushing Pulumi ESC Secrets into External PlatformsPulumi How to serve trillions of tokens for trillion-parameter coding agentsModal CSS Hell | CSS-TricksCss Tricks Svelte for the Experienced React DevCss Tricks MotherDuck Builder Office Hours - July 21Motherduck Summer Data Engineering RoadmapMotherduck Accelerating GPT-5.6 Sol UltrafastCerebras