Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
github.com/nguyenhoaiphuong/kanban
This project is composed of 2 major packages: client and server.
Client is mainly programmed by reactjs. Some frameworks being used are listed below:
Server is programmed by GO langague.
Firstly make sure that you have Node, Docker and Git installed. Next clone this repo https://github.com/NguyenHoaiPhuong/warehouse.git. You can do this by going into your shell of choice and entering
git clone https://github.com/NguyenHoaiPhuong/kanban.git
Then, access the project directory (kanban) and run docker-compose up as shown below:
cd kanban
docker-compose up
Next, open a new terminal and access the project directory again. Restore the backup database by make command:
make restore-backup-db
Finally, open your web browser and access http://localhost:5001/. At the beginning, you will be requested to login. The default username and password are admin. After login successfully, you will be able to access the home page.
typescript
@types/react
@types/react-dom
@types/jest
@types/node
@types/react-router-dom
@types/redux
@material-ui/core
@material-ui/icons
react-redux
redux-thunk
react-router-dom
https://medium.com/azendoo-team/immutable-record-react-redux-99f389ed676
Axios Interceptors:
https://medium.com/swlh/handling-access-and-refresh-tokens-using-axios-interceptors-3970b601a5da
Webpack:
Docker env and arg:
https://vsupalov.com/docker-arg-env-variable-guide/#arg-and-env-availability
Add user and group:
docker for nodejs:
https://github.com/nodejs/docker-node/blob/master/docs/BestPractices.md#global-npm-dependencies
RUN vs CMD vs ENTRYPOINT
FAQs
Unknown package
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.