Research
Security News
Malicious npm Package Targets Solana Developers and Hijacks Funds
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
github.com/mitalipaygude/eks-anywhere-build-tooling
The EKS Anywhere Build Tooling repository contains the code to build artifacts corresponding to the various upstream dependency projects of Amazon EKS Anywhere. The build artifacts include container images, binary archives, and OVA image archives that will be consumed by the EKS Anywhere CLI during the cluster creation/deletion/upgrade workflow.
This table tracks the base images used to build the container images for the upstream dependencies of EKS Anywhere.
We appreciate your interest in contributing. Please refer to the Amazon EKS Anywhere Contribution Guide before submitting any issues or pull requests.
If you discover a potential security issue in this project, or think you may have discovered a security issue, we ask that you notify AWS Security via our vulnerability reporting page. Please do not create a public GitHub issue.
This project is licensed under the Apache-2.0 License.
FAQs
Unknown package
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
Security News
Research
Socket researchers have discovered malicious npm packages targeting crypto developers, stealing credentials and wallet data using spyware delivered through typosquats of popular cryptographic libraries.
Security News
Socket's package search now displays weekly downloads for npm packages, helping developers quickly assess popularity and make more informed decisions.