All Questions
Tagged with npm web-application
3 questions
2
votes
1
answer
229
views
Basically only 2 ways of npm supply chain attacks?
Almost every week you can read about attacks performed through compromised npm libraries. The npm ecosystem is vast and unmanageable and for it-sec people it is frustrating to deal with all the ...
- 33
1
vote
1
answer
1k
views
How secure is WebPack? [closed]
If NPM packages are so vulnerable as described in this article, is it acceptable to use WebPack for web-applications, in which security is a priority?
Edit: when using WebPack you should use NPM-...
- 13
4
votes
1
answer
286
views
Malicious NPM Package - Does it fit into OWASP Top Ten 2017?
On various security forums I have seen links to a post about a fictive malicious NPM package harvesting information. The posts title:
I’m harvesting credit card numbers and passwords from your site....
- 797