Blogs

Visibly invisible malicious Node.js packages: When configuration niche meets invisible characters

Snyk

A focus on attacks in the Node.js ecosystem via the yarn and npm package managers, examining how configuration abuse and hidden characters can lead to RCE.

Visit Site

Visibly invisible malicious Node.js packages: When configuration niche meets invisible characters
10 best practices to containerize Node.js web applications with DockerSnyk Weaponizing AI Coding Agents for Malware in the Nx Malicious Package Security IncidentSnyk How to handle Node.js file uploads with FastifySnyk What is a Container Registry security?Snyk How to verify and secure your Mastodon accountSnyk Vulnerability assessmentSnyk Publish changes - MintlifyMintlify How we grew Mintlify by doing things that don't scaleMintlify Six Things to Consider When Using Redis on HerokuRedis Workato integrations: What's included and when to use ZapierZapier 6 ways to use the Zapier Zoho CRM integrationZapier Get email alerts for Facebook Messenger messagesZapier Grafana Is Not Worried About AWS CommercializationThenewstack When CI Meets CD: Deliver With ConfidenceThenewstack Pulumi ESC Table Editor Now Supports Dynamic Credential and Secret IntegrationsPulumi Pushing Pulumi ESC Secrets into External PlatformsPulumi Godoc: documenting Go code - The Go Programming LanguageGo Go.dev: a new hub for Go developers - The Go Programming LanguageGo Managing dependencies - The Go Programming LanguageGo Automatic cipher suite ordering in crypto/tls - The Go Programming LanguageGo