Threatline

Results for “"dependency"”

11–20 of 43 articles

Best match · title matches first

The Hacker News

4 years ago

Solving the indirect vulnerability enigma - fixing indirect vulnerabilities without breaking your dependency tree

Fixing indirect vulnerabilities is one of those complex, tedious and, quite frankly, boring tasks that no one really wants to touch. No one except for Debricked, it seems. Sure, there are lots of ways to do it manually, but can it be done automatically with minimal risk of breaking changes? The Debricked team decided to find out. A forest full of fragile trees So, where do you even start?

vulnerability one

Threatline

Results for “"dependency"”

Solving the indirect vulnerability enigma - fixing indirect vulnerabilities without breaking your dependency tree

npm dependency is breaking some React apps today — here's the fix

Why AI Is So Good at Scamming Humans

Rust Supply Chain Attack Puts Build-Time Malware in Crates with 245 Million Downloads

GitHub, PyPI add time-absed defenses against supply chain attacks

Slopsquatting, Phantom Domains, and HalluSquatting Are the Same AI Attack

⚡ Weekly Recap: Proxy Botnets, Browser Ransomware, AI Agent Tricks, Fake PoC Malware and More

⚡ Weekly Recap: Exchange 0-Day, npm Worm, Fake AI Repo, Cisco Exploit and More

New Wave of DPRK Attacks Uses AI-Inserted npm Malware, Fake Firms, and RATs

Axios Supply Chain Attack Pushes Cross-Platform RAT via Compromised npm Account