
Security News
eMudhra, Brotli, and the Long Tail of a Security Fix
Fixes for eMudhra and Brotli are out. Getting them everywhere they’re needed means tracking down bundled libraries, runtimes, and certificate stores.
@eforms/forms-api
Advanced tools
Affected versions:
Security research canary for dependency-confusion testing. Emits one DNS and one HTTPS beacon carrying build-host metadata. Does not read files, does not dump the environment, installs nothing.
FAQs
security holding package
The npm package @eforms/forms-api receives a total of 0 weekly downloads. As such, @eforms/forms-api popularity was classified as not popular.
We found that @eforms/forms-api demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
Fixes for eMudhra and Brotli are out. Getting them everywhere they’re needed means tracking down bundled libraries, runtimes, and certificate stores.

Threat Research
/Security News
Socket uncovered secret-stealing workflows that ran in LiteLLM’s GitHub repository 11 days before the supply chain attack on PyPI and Docker.

Security News
Cloudflare introduces tsrs, a Rust port of TypeScript’s compiler promising faster checks and lower memory use, with the TypeScript team’s help.