Postmortem for Malicious Packages Published on July 12th, 2018 - ESLint - Pluggable JavaScript linter

2018/07/12 23 users eslint Pac

Postmortem for Malicious Packages Published on July 12th, 2018 Summary On July 12th, 2018, an attacker compromised the npm account of an ESLint maintainer and published malicious versions of the eslint-scope and eslint-config-eslint packages to the npm registry. On installation, the malicious pac... 続きを読む

The npm Blog — `crossenv` malware on the npm registry

2017/08/03 29 users The npm Blog

On August 1, a user notified us via Twitter that a package with a name very similar to the popular cross-env package was sending environment variables from its installation context out to npm.hacktask... 続きを読む

Sonatype Nexusを使用して、PrivateなMavenリポジトリ、npm Registry、Docker Registryを構築する - CLOVER

2017/01/09 40 users CLOVER Docker Registry OSS版 オフ

Sonatype Nexusが、OSS版でもバージョン3からDocker Registryになれると聞き、「これは！」と思い 自分でも試してみようかと。 TheNEXUS | A Community Project Using Nexus 3 as a Private Docker Registry | TheNEXUS Nexus RepositoryのDocker Registryを使ってオフ... 続きを読む