Tag

adm-zip-npm

Safeguard articles tagged "adm-zip-npm" — guides, analysis, and best practices for software supply chain and application security.

1 article

Open Source

adm-zip npm Security: Zip Slip Risks and Safe Extraction

adm-zip is a popular pure-JavaScript zip library for Node.js, and its history of path-traversal flaws makes safe extraction non-optional. Here is what went wrong and how to use it correctly.

Jun 9, 20255 min read