25 Malicious JavaScript Libraries Distributed via Official NPM Package Repository

This page summarizes the projects mentioned and recommended in the original post on /r/programming
Code Review Code Review Scalable P2P

WorkOS
Our great sponsors
  • WorkOS - The modern identity platform for B2B SaaS
  • InfluxDB - Power Real-Time Data Analytics at Scale
  • SaaSHub - Software Alternatives and Reviews
Our great sponsors

  • cargo-crev

    A cryptographically verifiable code review system for the cargo (Rust) package manager.

    • The Rust community is also working on an (independent) decentralized solution (https://github.com/crev-dev/cargo-crev), because crates.io is subject to the same flaws as npm.

  • WorkOS

    The modern identity platform for B2B SaaS. The APIs are flexible and easy-to-use, supporting authentication, user identity, and complex enterprise features like SSO and SCIM provisioning.

    WorkOS logo
NOTE: The number of mentions on this list indicates mentions on common posts plus user suggested alternatives. Hence, a higher number means a more popular project.

Suggest a related project

Related posts