Sandworm HQ

Easy auditing & sandboxing for your JavaScript dependencies

[Razvan Roman @razvanr]

1/ Today we're introducing Pilot Protocol: the Network OS for agents.

A network where ~250,000 autonomous agents already live and work.

If you’re building for agents, use it to get autonomous distribution for your app overnight.

[Sandworm HQ @SandwormHq]

@nick_thompson excuse the shameless plug but there's a better way to deal with this: https://t.co/Wkzpa0DvYz

[Sandworm HQ @SandwormHq]

@EddyVinckk pardon the shameless plug but..there's a better way out of this.. https://t.co/Wkzpa0DvYz

[Sandworm HQ @SandwormHq]

@FelippeRegazio there are better ways you know..https://t.co/Wkzpa0DvYz

[Sandworm HQ @SandwormHq]

@trufflesec https://t.co/6Mh8kkNqyb - here's an updated, real time list of all malicious scripts found in packages

[Sandworm HQ @SandwormHq]

We’ve launched @SandwormAlerts - real time vulnerabilities detected in npm packages. Follow to always stay on top of your security game!

[Sandworm HQ @SandwormHq]

Sandworm now supports PHP!

PHP developers, rejoice! You can now use Sandworm to scan your code for vulnerabilities, ensure that your dependencies are licensed correctly, and manage them effectively.

Read all about it here: https://t.co/LeC6Div0gW

#PHP #Security #Sandworm

[Sandworm HQ @SandwormHq]

We're excited to bring you some highly anticipated additions to our Audit and Cloud products: monorepos, workspaces, and npm v1 lockfile support.

Read all the details here https://t.co/7Cc8x5VITA

[Sandworm HQ @SandwormHq]

We're scanning the @npm registry to find vulnerabilities and malicious code; we're also uncovering cool stats! The most popular packages in the registry:

1. Chalk: https://t.co/PxP7y4ZFLR
2. Commander: https://t.co/paEzELoLd1

Source: https://t.co/JY3bEx1zhy

#javascript #oss

[Sandworm HQ @SandwormHq]

@npmjs is is a double-edged sword: more packages, more security risks. Check out the overview for The State of NPM 2023: https://t.co/I1ZDbCaJ6O

#npm #javascript #softwaredevelopment #security #community

[Sandworm HQ @SandwormHq]

@hashnode Thanks for the support @hashnode

[Sandworm HQ @SandwormHq]

"🚨Security Alert🚨: “npm install https” can be a trap! It's NOT Node's built-in https but a package inactive for 8 years, yet 500K downloads/week, potential for malicious use: https://t.co/F0uHjCl0Jz

#NodeJS #npm #Cybersecurity #appsec

[Sandworm HQ @SandwormHq]

We’re not saying you should…but if you feel the urge to troll a fellow developer here are some safe & funny options: https://t.co/t0hZ4ABGPo

#javascript #NPM #appsec #cybersecurity

[Sandworm HQ @SandwormHq]

@frontenddogma @gabidobocan thanks for the shoutout @frontenddogma !

[Sandworm HQ @SandwormHq]

@moo9000 thank you so much for your HN submission, it made our day!

[Sandworm HQ @SandwormHq]

@ddanielecki @smashingmag @JavaScriptDaily Thanks @ddanielecki for the shoutout, we're grateful for this!

[Sandworm HQ @SandwormHq]

Keep your JavaScript code secure and compliant with Sandworm https://t.co/gpsD5jc4iN

[Sandworm HQ @SandwormHq]

@ddanielecki @smashingmag Thanks for the mention @ddanielecki !