An Interest In:
Web News this Week
- April 26, 2024
- April 25, 2024
- April 24, 2024
- April 23, 2024
- April 22, 2024
- April 21, 2024
- April 20, 2024
Some of Our Sources
- Slashdot
- Smashing Apps
- Creative Curio
- Naldz Graphics
- FanExtra - PSD
- Crazy Leaf Design
- My Ink Blog
- Android Dissected
- Codrops
- Dev To
Help Webnuz
Referal links:
May 3, 2018 03:20 pm
Original Link: http://rss.slashdot.org/~r/Slashdot/slashdot/~3/qQXxXcEUbMg/somebody-tried-to-hide-a-backdoor-in-a-popular-javascript-npm-package
Somebody Tried to Hide a Backdoor in a Popular JavaScript npm Package
Catalin Cimpanu, reporting for BleepingComputer: The Node Package Manager (npm) team avoided a disaster today when it discovered and blocked the distribution of a cleverly hidden backdoor mechanism inside a popular -- albeit deprecated -- JavaScript package. The actual backdoor mechanism was found in "getcookies," a relatively newly created npm package (JavaScript library) for working with browser cookies. The npm team -- which analyzed this package earlier today after reports from the npm community -- says "getcookies" contains a complex system for receiving commands from a remote attacker, who could target any JavaScript app that had incorporated this library.Read more of this story at Slashdot.
Original Link: http://rss.slashdot.org/~r/Slashdot/slashdot/~3/qQXxXcEUbMg/somebody-tried-to-hide-a-backdoor-in-a-popular-javascript-npm-package
Share this article:
Tweet
View Full Article
Slashdot
Slashdot was originally created in September of 1997 by Rob "CmdrTaco" Malda. Today it is owned by Geeknet, Inc..More About this Source Visit Slashdot