Injecting backdoors to NPM packages

This page summarizes the projects mentioned and recommended in the original post on dev.to

SurveyJS - Open-Source JSON Form Builder to Create Dynamic Forms Right in Your App
With SurveyJS form UI libraries, you can build and style forms in a fully-integrated drag & drop form builder, render them in your JS app, and store form submission data in any backend, inc. PHP, ASP.NET Core, and Node.js.
surveyjs.io
featured
InfluxDB - Power Real-Time Data Analytics at Scale
Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.
www.influxdata.com
featured
  • http-server

    a simple zero-configuration command-line http server

  • For this experiment we won't even publish it to npm or anywhere else, we can just serve this file locally with http-server. This file will be accessible locally via http://127.0.0.1:8080/is-number-7.0.0.tgz.

  • SurveyJS

    Open-Source JSON Form Builder to Create Dynamic Forms Right in Your App. With SurveyJS form UI libraries, you can build and style forms in a fully-integrated drag & drop form builder, render them in your JS app, and store form submission data in any backend, inc. PHP, ASP.NET Core, and Node.js.

    SurveyJS logo
  • lockfile-lint

    Lint an npm or yarn lockfile to analyze and detect security issues

  • An additional approach may be to use lockfile-lint, but you shouldn't just rely on this script entirely because there are other ecosystems than npm, and they may have similar issues.

NOTE: The number of mentions on this list indicates mentions on common posts plus user suggested alternatives. Hence, a higher number means a more popular project.

Suggest a related project

Related posts

  • The rising trend of malicious packages in open source ecosystems | Snyk

    2 projects | /r/netsec | 26 Mar 2023
  • What is the Go equivalent of Node http-server?

    5 projects | /r/golang | 12 Feb 2023
  • Transition to pnpm

    2 projects | dev.to | 7 Dec 2021
  • How to Build a Javascript Chat App

    5 projects | dev.to | 2 Nov 2021
  • Send a POST Request Containing a GraphQL Query with the Fetch API

    3 projects | dev.to | 6 Jun 2021