
Research
/Security News
9 Malicious NuGet Packages Deliver Time-Delayed Destructive Payloads
Socket researchers discovered nine malicious NuGet packages that use time-delayed payloads to crash applications and corrupt industrial control systems.
@gravitybv/strapi-plugin-permissions
Advanced tools
Strapi plugin that handles permissions through a config file.
This plugin is to have persistent permissions in different environments regarding api interaction.
npm install @gravitybv/strapi-plugin-permissions in the root of your Strapi project.If you dont have access to the @gravitybv scope you need to do the following:
repo and read:packages scopes selected. Make sure to store this somehwerenpm login --registry=https://npm.pkg.github.com --scope=gravitybvEnable in config/plugins.js:
{
"permissions": {
"enabled": true
}
}
The plugin will automatically create a file in the config/ directory of your Strapi installation. This newly created file is named config/permissions.js and will contain default permissions upon first install.
The permissions in this file will automatically be set upon Strapi bootstrap.
Please use the prefix plugin:: to target a specific plugin.
Use api:: to target one of your own controllers.
When only specifying the prefix and entity name, without targeting a controller (e.g. api::restaurant or plugin::users-permissions), the plugin will set the permissions for all of the controllers in that entity.
To target a specific controller, please use: api::restaurant.restaurant, or plugin::users-permissions.auth.
When using in a typescript project add a config to the plugin config:
config/plugins.js
{
"permissions": {
"enabled": true,
"config": {
"typescript": true
}
}
}
FAQs
Strapi plugin that handles permissions through a config file.
We found that @gravitybv/strapi-plugin-permissions demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 3 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Socket researchers discovered nine malicious NuGet packages that use time-delayed payloads to crash applications and corrupt industrial control systems.

Security News
Socket CTO Ahmad Nassri discusses why supply chain attacks now target developer machines and what AI means for the future of enterprise security.

Security News
Learn the essential steps every developer should take to stay secure on npm and reduce exposure to supply chain attacks.