Snyk Blog company blog
NPM lockfiles can be a security blindspot for injecting malicious modules in PRs
In this post, we show you how easy it is to introduce back doors that are easily missed by project owners… leaving your code insecure.
- Points
- 259
- HN comments
- 73
- Submissions
- 1
- Cited by
- 0 commenters
Security & PrivacySoftware Engineering2019
On Hacker News
| Submitted | Title on HN | Points | Comments |
|---|---|---|---|
| Dec 26, 2019 | NPM lockfiles can be a security blindspot for injecting malicious modules in PRs by fagnerbrack | 259 | 73 |
