Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Content of the closed byways.org
website hosted at scenicbyways.info. It contains descriptions,
maps and links to related information for over 800 America's most scenic roads.
It displays maps from Furkot and books from Amazon. Custom search engine is provided by Lunr.
Site is generated by Metalsmith
To preview the website:
npm install
make components preview
To build a static version:
make build
Fork and have fun. We take patches and update hosted version regularly.
If you modify .js files make sure you make lint
it.
If you work for any of the organizations that used to contribute to byways.org
and want to update
information on your byway but don't feel like dealing with this git
thing, drop us an e-mail at
contact@scenicbyways.info
How to use Furkot to add a new byway or make changes to existing one is described here.
We believe the content of the website (.json files in the contents
directory) is in public domain.
It was available from bywaysonline.org
run by FHWA before that site and the byways program was
defunded. If you think otherwise please contact us at contact@scenicbyways.info
Everything outside of the contents
directory (styles, javascript, jade templates etc.) is
published under MIT license.
Icon font generated by Iconmoon application:
Car designed by Diogo Trindade from The Noun Project
FAQs
Content of the closed `byways.org` website hosted at [scenicbyways.info]
The npm package byways receives a total of 1 weekly downloads. As such, byways popularity was classified as not popular.
We found that byways demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.