npm registry attacked by secret-stealing worm
#3
Scary stuff supply chain attacks like this really show how exposed developers can be. Token leaks are no joke.
On a related note, I came across how some governments are centralizing access too, like Rajasthan in India with their SSO ID portal (https://sso-id.net/). Different field, but same idea once access is compromised, everything’s at risk.
What do you all think is the best defense tighter token scopes or better monitoring?
Reply


Messages In This Thread
RE: npm registry attacked by secret-stealing worm - by Anil Neevansh - 25 September 25, 12:18

Forum Jump:


Users browsing this thread: 1 Guest(s)
[-]
Welcome
You have to register before you can post on our site.

Username/Email:


Password:





[-]
Recent Posts
NanaZip 6.0 Update 5 (6.0.1698.0)
NanaZip 6.0 Update ...harlan4096 — 06:29
7-Zip 26.01
7-Zip 26.01 Wha...harlan4096 — 06:26
Hasleo Backup Suite V5.8.2.0
Hasleo Backup Suite...harlan4096 — 06:25
Bitdefender 27.0.59.328
Latest version of ...harlan4096 — 06:24
AnyDesk 9.7.1 for Windows
Version 9.7.1 for ...harlan4096 — 06:23

[-]
Birthdays
Today's Birthdays
No birthdays today.
Upcoming Birthdays
avatar (51)Toligo

[-]
Online Staff
There are no staff members currently online.

>