Node.js Security

Security team at @npmjs tweeting about JavaScript security.

[Node.js Security @nodesecurity]

The Node Security Platform is joining @npmjs https://t.co/3qSqp7K5Aj

[Node.js Security @nodesecurity]

Automating Vulnerable Dependency Checking in CI Using Open Source by @varrunr
https://t.co/hY4D6fjny5

[npm @npmjs]

it’s official! we’re now a part of @github. excited for the next chapter of npm: https://t.co/j19Tv3VLsI

[npm @npmjs]

Big news! We’re excited to announce that @npmjs will be joining @GitHub! We're thrilled to join an organization as committed to open source as we are, so that the npm registry can remain free & public forever.
You can read more about this new chapter here: https://t.co/xjInDE46io

[Ron Perris @ronperris]

Going live at 9AM PT! Will be talking about JavaScript ecosystem security and solutions you can get involved in.

[Node.js Security @nodesecurity]

Did you ever want to know how a pentester makes their way from bug to exploit? Read about how @truesec found and exploited a bug in hot-formula-parser (CVE-2020-6836)

https://t.co/vopwYujwBF

[Node.js Security @nodesecurity]

Please update your npm cli to v6.13.4 as soon as you can.

npm i npm -g

https://t.co/jVRZdRXqU9

[Node.js Security @nodesecurity]

Great writeup about a remote code execution (RCE) vulnerability in the Strapi framework and the quick response by the Strapi team. https://t.co/dWdzlhFb1d

[npm @npmjs]

the npm security team has been hard at work building infrastructure to do behavioral analysis of npm packages at scale. vp of security, @adam_baldwin, explains what this entails (+ a sneak peek at the security insights API): https://t.co/cjgDSgIwTx

[Node.js Security @nodesecurity]

This Node.js Best Practices guide by @nodepractices has some great security guidance.

https://t.co/q1omG4DC38

[Node.js Security @nodesecurity]

Recent Study Estimates That 50% of Websites Using WebAssembly Apply It for Malicious Purposes

https://t.co/X62z6jm98q

[André Eleuterio @eleuterio_]

We get a lot of requests from people wanting to do research around malware in the Registry. It will be really exciting to see what the community does with this data!

[Node.js Security @nodesecurity]

Did you miss us? Well we're back and tweeting. The npm security team has taken over the nodesecurity twitter account and will be keeping you up to date on JavaScript security related happenings.

[The Daily Swig @DailySwig]

The Daily Swig speaks to npm’s @adam_baldwin about improving security for the world’s biggest repository of open source software packages

https://t.co/2xi6QEJmUn

[Node.js Security @nodesecurity]

The Node Security Platform Service is shutting down tomorrow:
https://t.co/F6ThtOVI61

[Node.js Security @nodesecurity]

On 9/30 the Node Security Platform will stop working. Here’s what you can do:
https://t.co/F6ThtOVI61

[Node.js Security @nodesecurity]

The Node Security Platform is shutting down on 9/30: https://t.co/F6ThtOVI61

[Node.js Security @nodesecurity]

JavaScript’s definitive listing of known package vulnerabilities is moving to @npmjs Here’s how to use it:

https://t.co/F6ThtOVI61

[Node.js Security @nodesecurity]

HashWick - a new vulnerability found by @indutny - impacts all v8js releases.

[Node.js Security @nodesecurity]

Are you prepared to move on from the Node Security Platform service? Here’s what you can do:

https://t.co/F6ThtOVI61

[Node.js Security @nodesecurity]

🔒node.js security release, time to update. https://t.co/DSwwqYZna3