Watch Me Run Malware From NPM
watch on portal.gitnation.org ↗https://portal.gitnation.org/contents/watch-me-run-malware-from-npmsummary
Demonstrates running real obfuscated malware packages from the npm registry in a controlled, safe environment while analyzing their behavior. Shows techniques to detect and defend applications against malicious JavaScript that evades audits and demonstrates a case where the payload is delivered as pre-compiled V8 bytecode rather than source code.
AI-written summary · about
related talks
33mDefeating Node.js Malware through API Tracing
46mSponsored Session: Malicious Package Trends Compared With Malware Evolution
39m"Malice in the Modules" - How NPM Became a Supply-Chain Battleground?
41mMalicious Modules on npm - a series of unfortunate events
28mnpm Security: Key Threats & Real Cases | Anastasiya Egorova #JSConfAM25
29mAll your packages are belong to us - Protecting your npm dependencies
26mHow npm is Making JavaScript Safe For Everyone
31mWhat's Going on Inside the Node_Modules Folder