The compromise of Axios is another reminder to configure your package manager to use a minimum release age. Not a perfect solution but provides folks a few days to catch and respond to a supply chain attack.
axios Compromised on npm - Malicious Versions Drop Remote Access Trojan - StepSecurity
Hijacked maintainer account used to publish poisoned axios releases including 1.14.1 and 0.30.4. The attacker injected a hidden dependency that drops a cross platform RAT. We are actively investigatin...
stepsecurity.io
![With docker debug you can get a debug shell into any container or image, even if they don't contain a shell. You don't need to modify the image to use Docker Debug. However, using Docker Debug still won't modify your image. Docker Debug brings its own toolbox that you can easily customize. The toolbox comes with many standard Linux tools pre-installed, such as vim, nano, htop, and curl. Use the builtin install command to add additional tools available on https://search.nixos.org/packages. Docker Debug supports bash, fish, and zsh. By default it tries to auto-detect your shell.
Custom builtin tools:
install [tool1] [tool2]: Add Nix packages from: https://search.nixos.org/packages, see example.
uninstall [tool1] [tool2]: Uninstall Nix packages.
entrypoint: Print, lint, or run the entrypoint, see example.
builtins: Show custom builtin tools.](https://cdn.bsky.app/img/feed_thumbnail/plain/did:plc:gynprot25jxtvibxivmqojaw/bafkreic4uaukosjibzlpwhydgjibek67jbcebdiyh7avn43xfkr35whnea)
