Menu

#Lab

6 posts

Feed·
6 of 6 posts
How a fake npm package made Cursor backdoor a Next.js admin route
🖼️
0Read More

How a fake npm package made Cursor backdoor a Next.js admin route

DEV Community·Oopssec Store·6 months ago
#2i3JS7vV
#lab#read#security#file#package

A two-flag chain that walks an attacker from a developer's stray dev-comment, through a typosquatted...

15s