Ppraveen·Aug 25How to Detect Hidden Risks in Third-Party SoftwareIdentify Security, Dependency, Licensing, and Code Risks in Third-Party Software17 min read·thecoderegistry.hashnode.dev
HHong·Jun 2, 2025npm's Security Dilemma: How Malicious Packages Exploit Openness and the Path ForwardThe discovery of malicious npm packages like xlsx-to-json-lh—a six-year-old typosquatting artifact mimicking the legitimate xlsx-to-json-lc—alongside broader campaigns involving 60+ packages, underscores systemic vulnerabilities in npm's security mod...3 min read·saysomething.hashnode.dev
