Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
github.com/danmuck/the_cookie_jar
CSE 312 Group Project
A Learning Management System (LMS) designed to have ease-of-use and basic professor/student interactions.
main
is production, dev
is close to production)..env
] in root directory with contents:MONGODB_URI=mongodb://database:27017/
DB_NAME=the_cookie_jar
docker compose up --build --force-recreate
and expect:cookie_lms | Checking availability of database:27017
cookie_lms | ...
cookie_lms | Host database:27017 is now available
cookie_lms | ...
cookie_lms | -----------------------------------
cookie_lms | the_cookie_jar server is running...
cookie_lms | -----------------------------------
cookie_lms | ...
http://localhost:8080/
on your webbrowser and interact with the server.Folder | Description |
---|---|
cmd | Applications that make use of pkg libraries. |
docs | Any documentation related to the project. |
pkg | Our libraries used in the project. |
public | Files to send to clients based on requests (i.e. the webpage, CSS, etc.) |
Note: main.go
is the only application not located in cmd
folder, this is because it is the main server application that is expected to interact with clients for production purposes.
FAQs
Unknown package
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.