Dissecting Npm Malware: Five Packages And Their Evil Install Scripts

1. steal-ur-stuff

   1 8 23 0.0

   Steal Ur Stuff

   

   I should really get around to how I discovered this 6 years ago and still nothing done about it

2. Civic Auth

   www.civic.com featured

   Auth in Less Than 5 Minutes. Civic Auth comes with multiple SSO options, optional embedded wallets, and user management — all implemented with just a few lines of code. Start building today.

   

3. npm

   2 52 17,233 2.1 JavaScript

   I should really get around to how I discovered this 6 years ago and still nothing done about it

4. npm-lint

   3 4 26 0.0 TypeScript

   A linter for npm & node package.json files with a focus on dependency security

   

   Also ended up writing a similar tool but didn't take it much further.

5. HomeBrew

   4 1,343 43,355 10.0 Ruby

   🍺 The missing package manager for macOS (or Linux)

   

Suggest a related project