Tag

tar

Safeguard articles tagged "tar" — guides, analysis, and best practices for software supply chain and application security.

1 article

Security Guides

tar (node-tar) Security Guide (2026)

node-tar is the archive engine underneath npm install itself — and a cluster of path-traversal and symlink CVEs made 'just extracting a tarball' one of the more dangerous operations in the Node.js ecosystem.

Jul 7, 20266 min read