
Research
/Security News
PolinRider Spreads Through Compromised GitHub Accounts and Packagist
Operators behind PolinRider used a compromised GitHub account to plant malware in four development versions of a Packagist package with 700,000+ downloads.
@authup/client-admin-console
Advanced tools
Authup's admin console: the administration SPA, served by server-core at /console/admin and hostable standalone.
This is the admin console for Authup, a flexible and secure authentication and
authorization system: a client-only Vue SPA that @authup/server-core serves
at <publicUrl>/console/admin. The package ships the built dist/ only; there is no
server process and no binary.
Served by server-core (the default): nothing to configure. The server injects
the runtime configuration into the shell per request and authenticates the
console with its opaque session cookie. ADMIN_CONSOLE_ENABLED=false turns
the route into a disabled notice; ADMIN_CONSOLE_PATH points server-core at a
substituted package directory.
Standalone hosting: serve dist/ under the /console/admin base path (or any other, injected as basePath) on any static
host (every deep link must answer with index.html), inject the
configuration by replacing the <!--admin-config--> marker in index.html
with <script>window.__AUTHUP__ = { apiUrl: 'https://auth.example.com' };</script>
(optional keys: basePath, clientId), and list the host's origin in the
server's TRUSTED_ORIGINS. On a foreign origin the console signs in through
the browser-side authorization-code flow instead of the session cookie.
VITE_API_URL=http://localhost:3000 npm run dev # vite on http://localhost:5173/console/admin/
npm run build # dist/, what server-core serves
npm run test
Made with 💚
Published under the AGPL-3.0 License. A commercial license is available for organizations that cannot meet the AGPL's conditions. See LICENSING.md or contact contact@tada5hi.net.
FAQs
Authup's admin console: the administration SPA, served by server-core at /console/admin and hostable standalone.
We found that @authup/client-admin-console demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Research
/Security News
Operators behind PolinRider used a compromised GitHub account to plant malware in four development versions of a Packagist package with 700,000+ downloads.

Security News
GitHub Actions now supports cache-mode, a least-privilege control on the Actions cache aimed at the cache poisoning technique behind recent compromises.

Company News
Allow myself to introduce... myself.