Vulnerability Note VU#319816 - npm fails to restrict the actions of malicious npm packages

Vulnerability Note VU#319816 - npm fails to restrict the actions of malicious npm packages

Vulnerability Note VU#319816 Original Release Date: 2016-03-26 | Last Revised: 2016-03-26 npm all...概要を表示 Vulnerability Note VU#319816 Original Release Date: 2016-03-26 | Last Revised: 2016-03-26 npm allows packages to take actions that could result in a malicious npm package author to create a worm that spreads across the majority of the npm ecosystem. npm is the default package manager for Node.js, which is a runtime environment for developing server-side web applications. There are several factors

• npm
• security
• node.js