Skip to content

Piero Bosio Social Web Site Personale Logo Fediverso

Social Forum federato con il resto del mondo. Non contano le istanze, contano le persone
  • hongminhee@hollo.socialundefined

    Is it just me, or is #npm's trusted publishing unnecessarily rigid?

    Uncategorized npm
    3
    0 Votes
    3 Posts
    0 Views
    hongminhee@hollo.socialundefined
    @bart@floss.social Spot on. The vendor lock-in is exactly what's holding me back from moving to Codeberg. It's frustrating that standard security features like OIDC publishing are becoming a golden cage that keeps us tied to big platforms. I'd love to see npm support OIDC from Forgejo/Gitea, but it feels like we're still a long way from a truly forge-agnostic ecosystem. 2FA tokens for life, I guess? 🥲
  • redhotcyber@mastodon.bida.imundefined

    Attacco supply chain npm, Shai-Hulud diffonde codice malevolo in centinaia di pacchetti

    News redhotcyber news cybersecurity hacking malware npm shaihulud sottrazione
    1
    1
    0 Votes
    1 Posts
    9 Views
    redhotcyber@mastodon.bida.imundefined
    Attacco supply chain npm, Shai-Hulud diffonde codice malevolo in centinaia di pacchetti📌 Link all'articolo : https://www.redhotcyber.com/post/attacco-supply-chain-npm-shai-hulud-diffonde-codice-malevolo-in-centinaia-di-pacchetti/#redhotcyber #news #cybersecurity #hacking #malware #npm #shaihulud #sottrazione #credenziali #token #sviluppatori
  • soatok@furry.engineerundefined

    Moving Beyond the NPM elliptic Package

    Uncategorized npm crypto cryptography elliptic security infosec cve mitigation
    1
    0 Votes
    1 Posts
    10 Views
    soatok@furry.engineerundefined
    Moving Beyond the NPM elliptic PackageIf you're in a hurry, head on over to soatok/elliptic-to-noble and follow the instructions in the README in order to remove the elliptic package from your project and all dependencies in node_modules. Art: CMYKat Why replace the elliptic package? Yesterday, the Trail of Bits blog published a post about finding cryptographic bugs in the elliptic library (a Javascript package on NPM) by using the Wycheproof.http://soatok.blog/2025/11/19/moving-beyond-the-npm-elliptic-package/#npm #crypto #cryptography #elliptic #security #infosec #cve #mitigation #appsec #javascript #js #npm #npmsecurity #npmpackages
  • redhotcyber@mastodon.bida.imundefined

    IndonesianFoods: Il worm che sta devastando npm e ha creato 100.000 pacchetti

    News worm redhotcyber news indonesianfoods npm malware cybersecurity hacking
    1
    1
    0 Votes
    1 Posts
    4 Views
    redhotcyber@mastodon.bida.imundefined
    IndonesianFoods: Il worm che sta devastando npm e ha creato 100.000 pacchetti📌 Link all'articolo : https://www.redhotcyber.com/post/indonesianfoods-il-worm-che-sta-devastando-npm-e-ha-creato-100-000-pacchetti/Un #worm auto-propagante, denominato IndonesianFoods, è stato scoperto in npm. Genera nuovi pacchetti ogni sette secondi. Secondo Sonatype, il malware ha già creato oltre 100.000 pacchetti e questo numero continua a crescere. Il nome del #worm IndonesianFoods assegna nomi casuali legati a piatti indonesiani. A cura di Redazione RHC#redhotcyber #news #indonesianfoods #npm #worm #malware #cybersecurity #hacking #pacchettidanneggiati #payloaddannosi #sicurezzainformatica #minacceinformatiche #attacchinformatici #malwaredetection

Gli ultimi otto messaggi ricevuti dalla Federazione
@pierobosio@soc.bosio.info
Post suggeriti