Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
github.com/howardabrams/dot-files
I don't know any geek worth his weight in arsenic that doesn't put all of his/her collection of dot files under source code control. By putting this stuff up on Github makes it trivial to share between different computers and share with the world.
Mostly startup scripts for Emacs and Zsh. If you are interested in how I configure Emacs, start with emacs.org. While the configuration files look like a document, that is the basis for my Emacs Lisp code.
My scripts and other dot files usually use blurbs and blippets from multiple sources on these here intertubes, and I find that when I get back around to updating them years ago, I don't always have the background for maintaining any particular blarp.
So I use a literate programming approach based on the Babel Project (which is built on org-mode which, incidently, only runs in Emacs). Each source file is tangled out to the destination in my home directory.
You may, as this collection is under a creative commons license. However, you probably don't want to take complete files (or even fork this project), as I have amassed a quite a bit of Lisp code for my environment. Instead, gander through the documented output for the files, and copy and paste anything that you find interesting.
FAQs
Unknown package
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.