
Research
Malicious fezbox npm Package Steals Browser Passwords from Cookies via Innovative QR Code Steganographic Technique
A malicious package uses a QR code as steganography in an innovative technique.
Active Admin is a Ruby on Rails framework for creating elegant backends for website administration.
Active Admin for enterprise is available via the Tidelift subscription. Learn More.
If you want to contribute through code or documentation, the Contributing guide is the best place to start. If you have questions, feel free to ask.
If you want to support us financially, you can help fund the project through a Tidelift subscription. By buying a Tidelift subscription you make sure your whole dependency stack is properly maintained, while also getting a comprehensive view of outdated dependencies, new releases, security alerts, and licensing compatibility issues.
You can also support us with a weekly tip via Liberapay.
Finally, we have an Open Collective where you can become a backer or sponsor for the project, and also submit expenses to it.
We try not to reinvent the wheel, so Active Admin is built with other open source projects:
Please use the Tidelift security contact to report a security vulnerability. Tidelift will coordinate the fix and disclosure.
Thanks to Greg Bell for creating and sharing this project with the open source community.
Thanks to all the people that ever contributed through code or other means such as bug reports, issue triaging, feature suggestions, code snippet tips, Slack discussions and so on.
Thanks to Tidelift and all our Tidelift subscribers.
Thanks to Open Collective and all our Open Collective contributors.
FAQs
Unknown package
We found that activeadmin demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 8 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
A malicious package uses a QR code as steganography in an innovative technique.
Research
/Security News
Socket identified 80 fake candidates targeting engineering roles, including suspected North Korean operators, exposing the new reality of hiring as a security function.
Application Security
/Research
/Security News
Socket detected multiple compromised CrowdStrike npm packages, continuing the "Shai-Hulud" supply chain attack that has now impacted nearly 500 packages.