Tag: JavaScript dependencies
North Korean Hackers Suspected in Supply Chain Attack on Popular Axios Project
Jeff Burt | | Axios, CI/CD, Google Threat Intelligence Group, JavaScript dependencies, Mandiant, North Korea, remote access trojan (RAT), Socket, sonatype, supply chain attack, TeamPCPThe threat actor targeted a highly popular open source project with more than 100 million weekly downloads, creating a large "blast radius." ...
The Hidden Security Risks in Modern JavaScript Frameworks and How React Teams Can Reduce Them
Samuel Ogbonna | | client-side rendering security, client-side vulnerabilities, content security policy, Dependency Management, frontend attack surface, frontend security best practices, input validation, JavaScript dependencies, JavaScript security, JavaScript vulnerabilities, modern JavaScript frameworks, NPM security, React application security, React security risks, secure React development, SPA security, state management security, third-party libraries risk, web application security, XSS attacksReact and modern JavaScript frameworks accelerate development—but hide serious security risks. Learn where vulnerabilities come from and how to reduce client-side attack surfaces ...
