SonaType detected a Malware in NPM registry imitating to be Twilio package that opens a reverse connection to a remote server and allows attacker to access your local machine content. Let us discuss
Since this command is unix specific it won’t work on Windows
https://blog.sonatype.com/twilio-npm-is-brandjacking-malware-in-disguise
 
 
Resources
SSH Tunneling https://youtu.be/N8f5zv9UUMI
Ngrok https://www.youtube.com/watch?v=pR2qNnVIuKE

SonaType detected a Malware in NPM registry imitating to be Twilio package that opens a reverse connection to a remote server and allows attacker to access your local machine content. Let us discuss Since this command is unix specific it won’t work on Windows https://blog.sonatype.com/twilio-npm-is-brandjacking-malware-in-disguise Resources SSH Tunneling https://youtu.be/N8f5zv9UUMI Ngrok https://www.youtube.com/watch?v=pR2qNnVIuKE

Installing This Twilio Malware NPM Package Opens a Backdoor on Your Developer Machine

Welcome to the Backend Engineering Show podcast with your host Hussein Nasser. If you like software engineering you’ve come to the right place. I discuss all sorts of software engineering technologies and news with specific focus on the backend. All opinions are my own. 

Most of my content in the podcast is an audio version of videos I post on my youtube channel here http://www.youtube.com/c/HusseinNasser-software-engineering 

Buy me a coffee 
https://www.buymeacoffee.com/hnasr

🧑‍🏫 Courses I Teach
https://husseinnasser.com/courses

Technology

Welcome to the Backend Engineering Show podcast with your host Hussein Nasser. If you like software engineering you’ve come to the right place. I discuss all sorts of software engineering technologies and news with specific focus on the backend. All opinions are my own. Most of my content in the podcast is an audio version of videos I post on my youtube channel here http://www.youtube.com/c/HusseinNasser-software-engineering Buy me a coffee https://www.buymeacoffee.com/hnasr 🧑‍🏫 Courses I Teach https://husseinnasser.com/courses

Share Installing This Twilio Malware NPM Package Opens a Backdoor on Your Developer Machine

Sign up to save your podcasts

Installing This Twilio Malware NPM Package Opens a Backdoor on Your Developer Machine

Installing This Twilio Malware NPM Package Opens a Backdoor on Your Developer Machine

More shows like The Backend Engineering Show with Hussein Nasser

Freakonomics Radio

Software Engineering Radio - the podcast for professional software developers

Risky Business

Science Vs

Syntax - Tasty Web Development Treats

Darknet Diaries

Practical AI

Within Reason

All-In with Chamath, Jason, Sacks & Friedberg

Dwarkesh Podcast

Big Technology Podcast

Hard Fork

The AI Daily Brief: Artificial Intelligence News and Analysis

Prof G Markets

The Pragmatic Engineer