
Research
/Security News
9 Malicious NuGet Packages Deliver Time-Delayed Destructive Payloads
Socket researchers discovered nine malicious NuGet packages that use time-delayed payloads to crash applications and corrupt industrial control systems.
@types/dompurify
Advanced tools
npm install --save @types/dompurify
This package contains type definitions for DOM Purify (https://github.com/cure53/DOMPurify).
Files were exported from https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/dompurify.
DOMPurifyThese definitions were written by Dave Taylor https://github.com/davetayls // Samira Bazuzi, FlowCrypt, Exigerr, Piotr Błażejewicz, and Nicholas Ellul.
sanitize-html is an HTML sanitizer that is similar to DOMPurify. It also removes unwanted HTML and protects from XSS attacks but is not limited to the DOM and can be used on the server-side with Node.js.
xss is another package that provides protection against XSS attacks. It includes a range of options for filtering and customizing the sanitization process, similar to DOMPurify, but it has a different API and may have different default settings.
FAQs
Stub TypeScript definitions entry for dompurify, which provides its own types definitions
The npm package @types/dompurify receives a total of 1,972,140 weekly downloads. As such, @types/dompurify popularity was classified as popular.
We found that @types/dompurify demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Socket researchers discovered nine malicious NuGet packages that use time-delayed payloads to crash applications and corrupt industrial control systems.

Security News
Socket CTO Ahmad Nassri discusses why supply chain attacks now target developer machines and what AI means for the future of enterprise security.

Security News
Learn the essential steps every developer should take to stay secure on npm and reduce exposure to supply chain attacks.