Safeguard
Tag

npm-registry-package-hijacking

Safeguard articles tagged "npm-registry-package-hijacking" — guides, analysis, and best practices for software supply chain and application security.

1 article

Vulnerability Analysis

npm registry package hijacking incidents (CVE-2015-8858 era)

CVE-2015-8858 anchors a broader era of npm registry package hijacking — tar-extraction path traversal, left-pad, and weak account security explained.

Jan 4, 20268 min read
npm-registry-package-hijacking — Safeguard Blog