| | Improper markup sanitization in popular software (github.com/chalker) |
| 4 points by monort on July 18, 2017 | past |
|
| | Gathering weak npm credentials (github.com/chalker) |
| 3 points by gburt on June 26, 2017 | past |
|
| | How I obtained direct publish access to 13% of npm packages (github.com/chalker) |
| 55 points by kasbah on June 26, 2017 | past |
|
| | Obtaining publish access to 13% of npm packages (github.com/chalker) |
| 14 points by louis-paul on June 24, 2017 | past | 2 comments |
|
| | Gathering weak npm credentials (github.com/chalker) |
| 12 points by philfreo on June 23, 2017 | past |
|
| | Gathering weak npm credentials (github.com/chalker) |
| 4 points by JBiserkov on June 23, 2017 | past |
|
| | Gathering weak npm credentials (github.com/chalker) |
| 5 points by steve_taylor on June 23, 2017 | past | 1 comment |
|
| | How I obtained publish access to 13% of npm packages (including popular ones) (github.com/chalker) |
| 5 points by ChALkeR on June 22, 2017 | past |
|
| | Gathering weak npm credentials (github.com/chalker) |
| 10 points by petethomas on June 22, 2017 | past |
|
| | Gathering weak npm credentials (github.com/chalker) |
| 20 points by feross on June 22, 2017 | past | 1 comment |
|
| | Stealing Travis secure variables (and Snap CI too) (github.com/chalker) |
| 2 points by ChALkeR on July 7, 2016 | past |
|
| | Let's Fix Node.js Buffer API (github.com/chalker) |
| 2 points by ChALkeR on Jan 15, 2016 | past | 1 comment |
|
| | Node.js Buffer knows everything – your traffic, sources, keys and configs (github.com/chalker) |
| 5 points by ChALkeR on Jan 14, 2016 | past | 5 comments |
|
| | Survey of popular Node.js packages reveals credential leaks (github.com/chalker) |
| 355 points by fapjacks on Dec 6, 2015 | past | 76 comments |
|
| | Do not underestimate credential leaks (github.com/chalker) |
| 3 points by jergason on Dec 4, 2015 | past |
|