Video of malware node packages trying to phone home

• harden-runner

  15 491 7.5 TypeScript

  Network egress filtering and runtime security for GitHub-hosted and self-hosted runners

  

Few hours back several malicious packages were released on npm registry. This video shows how some of these packages are making outbound calls as part of the preinstall step when executed in a GitHub Actions workflow. DNS Exfiltration and network calls detected by Harden-Runner GitHub Action https://github.com/step-security/harden-runner

• supply-chain-goat

  3 1 9.3 JavaScript

  Discontinued Hands-on tutorials to learn about software supply chain security (by varunsh-coder)

This is one of the GitHub Actions workflow runs: https://github.com/varunsh-coder/supply-chain-goat/actions/runs/2037070162

• SurveyJS

  surveyjs.io sponsored

  Open-Source JSON Form Builder to Create Dynamic Forms Right in Your App. With SurveyJS form UI libraries, you can build and style forms in a fully-integrated drag & drop form builder, render them in your JS app, and store form submission data in any backend, inc. PHP, ASP.NET Core, and Node.js.

  

Suggest a related project