Global CDN Service ‘jsdelivr’ Exposed Users to Phishing Attacks
21-Jul-23
Open-source components are essential in the linked world of web development because they encourage developer community engagement and code exchange. Recent cases, however, have revealed weaknesses in the supply chain, with malicious actors using open-source content delivery networks (CDNs) to continue serving risky packages long after they have been identified and deleted from package registries.
For many years, NPM (Node Package Manager) has been the go-to package manager for Node.js applications and the JavaScript programming language. Developers may quickly install, manage, and distribute code packages with NPM thanks to the over a million open-source JavaScript packages that are available in its centralised registry. NPM uses security features like automated vulnerability scanning, advisories, and the capacity to audit installed packages for known security problems in order to protect developers.
