Domain takeover

Attackers can gain control over an open source package by owning the maintainer’s domain.

All your domains are belong to us

Let's discuss one of the most underrated but effective attack vectors: using expiring domains to take over npm packages.

Published by Garnet Research (@research)

By

Date

October 4, 2022

Reading time

· 9 min

Read more