TechiSeek

AddAdd your Listings

Blogs

Node-gyp Supply Chain Compromise

Snyk

A self-propagating npm worm uses binding.gyp and node-gyp to run code at install time, steal secrets, persist in GitHub, and spread through packages.

Visit Site

10 best practices to containerize Node.js web applications with DockerSnyk How to handle Node.js file uploads with FastifySnyk What is a Container Registry security?Snyk How to verify and secure your Mastodon accountSnyk Vulnerability assessmentSnyk Weaponizing AI Coding Agents for Malware in the Nx Malicious Package Security IncidentSnyk How We Eliminated Long-Lived CI Secrets Across 70+ ReposPulumi with Docker Using Node.jsDocker Docker for Windows Desktop with KubernetesDocker NO_EXTERNAL_CSS_AT_IMPORTSVercel Detect Non-Inclusive Language with Retext and Node.js - Deepgram Blog ⚡️Deepgram How Mondelez Accelerates Supply Chain Training Across 150+ Global Manufacturing PlantsSynthesia Anthropic Identifies Biased Reasoning and Recklessness as Drivers of Claude’s PyPI AttackSocket Announcing Socket Certified Patches: One-Click Fixes for Vulnerable DependenciesSocket Updated and Ongoing Supply Chain Attack Targets CrowdStrike npm PackagesSocket upm Launches as a Fast, Tiny Package Manager Written in TypeScriptSocket GlassWorm Loader Hits Open VSX via Developer Account CompromiseSocket Supply Chain Attacks and Cloud Native: What You Need to KnowThenewstack Improving Pulumi’s Docker ImagesPulumi Webinar Recap: Webinar Recap: Securing the Software Supply Chain with Docker BusinessDocker