Cloud Security Alliance News Clipping Site

Tag: npm packages

The Register: Ongoing typosquatting campaign impersonates hundreds of popular npm packages

Nov 5, 2024

—

by

system automation

in Uncategorized

Source URL: https://www.theregister.com/2024/11/05/typosquatting_npm_campaign/ Source: The Register Title: Ongoing typosquatting campaign impersonates hundreds of popular npm packages Feedly Summary: Puppeteer or Pupeter? One of them will snoop around on your machine and steal your credentials An ongoing typosquatting campaign is targeting developers via hundreds of popular JavaScript libraries, whose weekly downloads number in the tens of…
The Register: Socket plugs in $40M to strengthen software supply chain

Oct 22, 2024

—

by

system automation

in Uncategorized

Source URL: https://www.theregister.com/2024/10/22/socket_slurps_40m_to_secure/ Source: The Register Title: Socket plugs in $40M to strengthen software supply chain Feedly Summary: Biz aims to scrub unnecessary dependencies from npm packages in the name of security Security-focused developer Socket announced on Tuesday it has connected with another $40 million in funding to further its efforts to safeguard the software…