https://github.com/naugtur/i-run-code-from-the-internet
https://github.com/naugtur/i-run-code-from-the-internet
Last synced: 6 months ago
JSON representation
- Host: GitHub
- URL: https://github.com/naugtur/i-run-code-from-the-internet
- Owner: naugtur
- License: gpl-2.0
- Created: 2023-03-31T07:35:12.000Z (over 2 years ago)
- Default Branch: main
- Last Pushed: 2024-10-01T13:58:03.000Z (about 1 year ago)
- Last Synced: 2025-02-15T07:42:15.161Z (8 months ago)
- Size: 303 KB
- Stars: 1
- Watchers: 1
- Forks: 0
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
- License: LICENSE
Awesome Lists containing this project
README
# i-run-code-from-the-internet
## Node.js example
A demo of the security provided by LavaMoat.
The `demo` branch contains a sequence of commits with various versions of a "useful" package turning malicious.
---
Demo setup
```
git switch demo
git checkout 1
node sink/index.mjs &
PS1='>'
```
Demo playthrough
```
gitnext
npm start
npm test
```
## Webpack example
Pre-release demo of the LAvaMoat plugin for Webpack.
The `frontend` branch contains an example app which uses a malicious package.
Build it with and without the plugin and compare what happens.