Tag

cve-2015-8858

Safeguard articles tagged "cve-2015-8858" — guides, analysis, and best practices for software supply chain and application security.

1 article

npm registry package hijacking incidents (CVE-2015-8858 era)

CVE-2015-8858 anchors a broader era of npm registry package hijacking — tar-extraction path traversal, left-pad, and weak account security explained.