Friends of OpenJDK Today
Baruch Sadogursky2 articles
Latest post
Foojay Podcast #59: DevRel Explained and How to Become a Conference Speaker
Table of Contents VideoPodcast (Audio Only)GuestsContent What do people who have Developer Relations as their job description do? And how do you become a conference speaker? You’ll learn in this Foojay podcast! At Devoxx in Belgium, I got to talk …
- Frank Delporte,
- Baruch Sadogursky,
- Pratik Patel,
- Roni Dover
-
Namespace Shadowing (a.k.a. “Dependency Confusion”) Attack
The npm Registry is vulnerable to supply chain namespace shadowing, also known as “Dependency Confusion” attacks.
Make sure you create npm scoped packages and force exclude patterns.
1-2 of 2