writeups.xyz / How a Single Vulnerability Can Bring Down the JavaScript Ecosystem

Submitter : c2a

Date: 3 June 2024

Bounty : 500

Vulnerabilities :

• Web Cache Poisoning
• CPDoS
• Supply Chain Attack

Programs :

• GitHub (Npm)

Authors :

• Roni Carta (@0xLupin)

Link :
https://www.landh.tech/blog/20240603-npm-cache-poisoning/