Show HN: Give This Markdown to Your Coding Agent Before Publishing to NPM

freakynit1 pts0 comments

https://npm-supply-chain-attack-techniques.pagey.site/attack...Website: https://npm-supply-chain-attack-techniques.pagey.siteThis covers all techniques used in past 1 year to conduct various attacks on npm packages. Use it to get your project reviewed thoroughly before publishing.Exploits covered with mitigation information:1. Maintainer Account Takeover and Malicious Publish2. Lifecycle Hook Execution3. Self-Replicating npm Worms4. CI/CD Identity Plane Attacks5. Git-Based Dependency Smuggling6. Remote Dynamic Dependencies7. Phishing Infrastructure Hosted Through npm and Package CDNs8. Credential and Secret Harvesting9. Exfiltration and Dead-Drop Channels10. Persistence and Anti-Forensics11. Obfuscation and Payload Packaging12. Package Naming and Discovery Abuse

attack techniques https supply chain pagey

Related Articles