Displaying items by tag: NPM

The largest open-source software repository, GitHub, has announced two product updates to support developers, maintainers, and security researchers in ensuring the integrity of open-source projects, bolstering the security of software supply chains - private vulnerability reporting and npm package provenance.

GUEST OPINION: Companies are adopting cloud native technologies faster than ever before. With new technology comes new threats and challenges, so it’s no surprise that we’re seeing an increasing number of cyber threats targeting cloud native environments.

The maintainer of the node-ipc package, a node.js module for local and remote inter-process communication, added code to some of its nested dependencies, resulting in files on computers with Russian or Belarussian IPs being wiped, a security firm claims.

The NPM repository account linked to a popular node.js runtime was hijacked for a while on Friday and used to spread a malicious script, the security firm Sophos claims.

BRISBANE - January 20, 2011 - SolarWinds, Inc. (NYSE: SWI), a leading provider of powerful and affordable IT management software to more than 97,000 customers worldwide, today announced that it is set to address the unmet and growing needs of systems and virtualisation administrators.

BRISBANE - January 20, 2011 - SolarWinds, Inc. (NYSE: SWI), a leading provider of powerful and affordable IT management software to more than 97,000 customers worldwide, today announced that it is set to address the unmet and growing needs of systems and virtualisation administrators.