Class Central is learner-supported. When you buy through links on our site, we may earn an affiliate commission.

YouTube

How Malicious NPM Packages Make Your Apps Vulnerable - SnykLIVE Recording

Snyk via YouTube

Start learning Write review
Noble Desktop Ad

NY State-Licensed Certificates in Design, Coding & AI — Online

Learn More → Coursera Ad

Learn AI, Data Science & Business — Earn Certificates That Get You Hired

Learn More →

Overview

Google, IBM & Meta Certificates – 40% Off
One Coursera Plus subscription covers most Professional Certificates on Coursera.
Unlock All Certificates
This course examines how malicious npm packages can compromise applications through lifecycle scripts, dependency installation, pipelines, and compiled TypeScript output. It demonstrates several attack methods and discusses recommendations and open-source tools for preventing them.

Syllabus

- Stream Start
- Introductions
- Audit-resolver Project
- How do Developers Install Malicious Packages?
- Demo: Malicious Package via postinstall script
- Demo: Malicious Package with TypeScript
- Demo: Malicious Package via Pipeline and prepublish script
- Recommendations to Stop These Attacks
- Some Open Source Tools to Help
- Conclusion
- Outro
- Stream End

Taught by

Snyk

Reviews

Start your review of How Malicious NPM Packages Make Your Apps Vulnerable - SnykLIVE Recording

Start learning

Never Stop Learning.

Get personalized course recommendations, track subjects and courses with reminders, and more.

Sign up for free
Someone learning on their laptop while sitting on the floor.