writeups.xyz / Supply Chain Pollution: Hunting a 16 Million Download/Week npm Package Vulnerability for a CTF Challenge

Submitter : c2a

Date: 23 December 2020

Bounty : undisclosed

Vulnerabilities :

• Prototype Pollution

Programs :

• Node.js Third-Party Modules

Authors :

• Eugene Lim (@Spaceraccoonsec)

Link :
https://spaceraccoon.dev/supply-chain-pollution-hunting-a-16-million-download-week-npm-package