
Research
/Security News
9 Malicious NuGet Packages Deliver Time-Delayed Destructive Payloads
Socket researchers discovered nine malicious NuGet packages that use time-delayed payloads to crash applications and corrupt industrial control systems.
serverless
Advanced tools
The Serverless Application Framework Powered By Amazon Web Services - http://www.serverless.com

####The Serverless Application Framework Powered By Amazon Web Services - serverless.com
We've re-branded from JAWS and pushed out a HUGE release. We're now cleaning up bugs, finishing the new docs and fixing broken features. By the end of this week we will have made rapid progress. Please help us test, submit pull requests, and check out our Road Map for daily status updates. We will be moving quickly, stay tuned :)
Note: This project was formerly JAWS.
This is a command line tool. It requires Node V4. Install it via npm:
npm install serverless -g
s-project.json, your module JSON is now s-module.json and your function JSON is now s-function.json.s-function.json) helps reduce boilerplate. You can still have 1 folder containing 1 Lambda w/ 1 Endpoint. However, now you can have 1 folder containing 1 Lambda w/ multiple endpoints. As well as 1 folder containing multiple Lambdas each with multiple endpoints. You can point your multiple Lambdas to different handlers on a single file, or to different files within the folder. It's flexible.s-function.json resembles CF syntax, but is leaner and offers an abstraction layer which we will use to assist your workflow further in the near future. Lambda Function names are also much neater now.FAQs
[](https://serverless.com)
The npm package serverless receives a total of 1,046,982 weekly downloads. As such, serverless popularity was classified as popular.
We found that serverless demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Socket researchers discovered nine malicious NuGet packages that use time-delayed payloads to crash applications and corrupt industrial control systems.

Security News
Socket CTO Ahmad Nassri discusses why supply chain attacks now target developer machines and what AI means for the future of enterprise security.

Security News
Learn the essential steps every developer should take to stay secure on npm and reduce exposure to supply chain attacks.