▶ Videos →

📰 Dev.to · Pool Camacho

2 articles · Updated every 3 hours · View all reads

All Articles 169,896 Blog Posts 161,592 Tech Tutorials 45,142 Research Papers 33,047 News 21,622 ⚡ AI Lessons

The Axios Attack Proved npm audit Is Broken. Here's What Would Have Caught It

Dev.to · Pool Camacho 🔐 Cybersecurity ⚡ AI Lesson 4mo ago

The Axios Attack Proved npm audit Is Broken. Here's What Would Have Caught It

On March 31, North Korean hackers hijacked axios on npm and pushed a RAT to millions of devs. npm audit said nothing. Here's a technical breakdown of the attack

I built an npm malware scanner in Rust because npm audit isn't enough

Dev.to · Pool Camacho 🔐 Cybersecurity ⚡ AI Lesson 4mo ago

I built an npm malware scanner in Rust because npm audit isn't enough

aegis-scan is an open-source Rust CLI that catches malicious npm packages — obfuscated eval, typosquatting, maintainer takeovers — before they hit your node_mod