Neuer npm-Großangriff: Hunderte Pakete mit selbst-vermehrender Malware infiziert

Womöglich stecken hinter der Attacke dieselben Angreifer wie beim letzten Mal. Ihr Schadcode trägt den Namen eines prominenten Science-Fiction-Monsters in sich.

heise online
Executing Concurrent NPM Scripts

All along, we’ve been able to run multiple NPM scripts in the same run command. Here’s the scenario: Imagine that we have a script that is called buildStaging and another called buildProduction. We could run both scripts out of the box with NPM by creating a new script, let’s call it build and setting the value to npm run buildStaging && npm run buildProduction. The problem with this is that buildProduction won’t start until buildStaging is complete.

Jason N. Gaylord

Always fun when npm’s publish authentication route 404s.

#NodePackageManager #npm #npmjs #js #node

Malicious npm package taken down after Microsoft warning - Criminals have been caught trying to sneak a malicious package on to the popular Node.js platform ... more: https://nakedsecurity.sophos.com/2020/01/15/malicious-npm-package-taken-down-after-microsoft-warning/ #microsoftvulnerabilityresearch #nodepackagemanager #maliciouspackage #securitythreats #vulnerability #microsoft #backdoor #unix #npm
Malicious npm package taken down after Microsoft warning

Naked Security