Home
Feed

Extend

Hashnode Pro
Hashnode for Agents

Resources

The foreword
Hashnode gql skill

Buildful - AI coding agent that delivers frontier-level results at a fraction of the cost Bug0 - The AI-native e2e QA regression testing Hackathons Changelog Brand @hashnode on X Hashnode on LinkedIn Support - hello+support@hashnode.com Code of Conduct Terms Privacy Sitemap

Sign in

Search Hashnode

Search posts, tags, users, and pages

Discussion on "One In Two New Npm Packages Is SEO Spam Right Now" | Hashnode

Discussion

One In Two New Npm Packages Is SEO Spam Right Now

More than half of all new packages that are currently (29 Mar 2023) being submitted to npm are SEO spam. That is - empty packages, with just a single README file that contains links to various malicious websites. https://datawrapper.dwcdn.net/ZkWKj/2...

Mar 30, 2023·3 min read·blog.sandworm.devRead the article

#npm
#security

Written by

Gabi Dobocan

@gabidobo

Coder, Founder, Builder. Angelpad & Techstars Alumnus. Forbes 30 Under 30.

Coder, Founder, Builder. Angelpad & Techstars Alumnus. Forbes 30 Under 30.

Responses2

Markdown supported · ⌘↵ to post

メイヤーオーステイン

I love the name. You could have called it shai-hulud 😂

Good work in helping to improve the npm community!

Sergiy Yavorsky

I appreciate the research, but can’t get over the irony of Sandworm being also the name of a known Russian cyber criminal group :)

Gabi Dobocan

Yes we get that a lot 😅