The Invisible JavaScript Backdoor

• Express

  90 63,649 7.6 JavaScript

  Fast, unopinionated, minimalist web framework for node.

  

  All the code written in the article is javascript that is executed server side running Express on a Node server. Yes, you can run commands in the shell with javascript in that setup. The example code is... not really industry standard or good practice, but it's not completely unrealistic. (Anybody who allows query input to be executed in exec should look real hard at their review practices)

• mvregex

  2 6 0.0 Shell

  It's funny you mention that, because I wrote a script specifically to deal with these types of files that need to be moved from one operating system to another: https://github.com/nathanshearer/mvregex

• SurveyJS

  surveyjs.io

  sponsored

  Open-Source JSON Form Builder to Create Dynamic Forms Right in Your App. With SurveyJS form UI libraries, you can build and style forms in a fully-integrated drag & drop form builder, render them in your JS app, and store form submission data in any backend, inc. PHP, ASP.NET Core, and Node.js.

  

• rust

  328 92,627 10.0 Rust

  Empowering everyone to build reliable and efficient software.

  

  The lint is a part of the compiler itself, not a tool like clippy; and it is deny by default, so code with directionality overrides will not compile unless the lint explicitly disabled with #![allow(text_direction_codepoint_in_literal)] and/or #![allow(text_direction_codepoint_in_comment)]. Here is their implementation in the compiler.

• trojan-source

  1 1,216 3.6 SCSS

  Trojan Source: Invisible Vulnerabilities

  Works for me with the examples from https://github.com/nickboucher/trojan-source

Suggest a related project