Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
nestjs-server
Advanced tools
Running locally:
$> yarn dc:dev
Dependency Description:
@nestjs/common: Common NestJS Framework functionalities @nestjs/config: Config helper provided by NestJS. @nestjs/core: Provides the NestFactory. @nestjs/platform: Provides the Express Appliaction. @nestjs/jwt: JWT helpers by NestJS for JWT authentication. @nestjs/passport: NestJS Passport module to integrate with the authentication strategies of the 'passport' library. @nestjs/swagger: Swagger decorators used by NestJS to construct the OPEN API swagger JSON. @nestjs/typeorm: NestJS integration module with TypeOrm
@babel/cli: A required install for using babel. It allows the use of Babel from the terminal and is available as ./node_modules/.bin/babel. @babel/core: Core Babel functionality. This is a required installation. @babel/node: This works exactly like the Node.js CLI, with the added benefit of compiling with babel presets and plugins. This is required for use with nodemon. @babel/plugin-transform-runtime: This helps to avoid duplication in the compiled output. @babel/preset-env: A collection of plugins that are responsible for carrying out code transformations. @babel/register: This compiles files on the fly and is specified as a requirement during tests. @babel/runtime: This works in conjunction with @babel/plugin-transform-runtime.
FAQs
NestJs application server
We found that nestjs-server demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.