NPM-Vuln-PoC

KO | EN

gitlite — search

#python #typescript #golang #machine-learning #rust #linux #docker #nodejs #macos #security #pytorch #ios #mcp #openai

(★ 42)

Vulnerabilities discovered in npm packages [Berkeley PL & Security Research]

NPM-Vuln-PoC 최신버젼 다운로드

최종 버전 다운로드 (.zip)

// repository documentation

Was this content helpful?

★ 0 (0 ratings)

# NPM-Vuln-PoC

This repository contains the proof-of-concepts for vulnerabilities discovered in npm packages.

**Warning:** This repo will install vulnerable npm packages and test them to demonstrate the vulnerabilities. So running this project in a **VM** (with **Linux** or **Mac OS**) is highly recommended.

To reproduce the vulnerabilities, first install the vulnerable packages:

```
npm install
```

The following vulnerable packages require a global install or root privilege:

```
sudo npm install xtalk@0.0.7
sudo npm install nodeload-nmickuli@1.0.3
sudo npm install badjs-sourcemap-server@0.1.11
```

Then, start the PoC testing script:

```
sudo ./PoC.sh
```

**Notice:** some vulnerable packages start a web server on port 80, which requires root privilege. Therefore, ```sudo``` is prefixed in the above command.

Some vulnerable packages use APIs that are deprecated in Node.js v7.1+. To reproduce those vulnerabilities, try Node.js v4.6.x or Node.js v6.x.

Versions of those vulnerable packages can be found in the [package.json](package.json) file.

NPM-Vuln-PoC

NPM-Vuln-PoC 최신버젼 다운로드

오늘의 추천 프로젝트

Was this content helpful?

Recent Feedback

NPM-Vuln-PoC

NPM-Vuln-PoC 최신버젼 다운로드

오늘의 추천 프로젝트

Was this content helpful?

Recent Feedback

Download README