Post: npm search RCE? - Escape Sequence Injection

Link: https://azorius.net/c/674ks3jK6Lb4RXK42x

tedu on 16 Dec 2023 01:02 collapse

This has been a problem for so long, and everyone just kind of assumes that maybe somebody else fixed it at some other layer. Nobody really thinks about it much. Usually because the poc requires certain preconditions, but they're not that hard to find.