Dependency-Based Attacks on Node.js
Brian Pfretzschner, Lotfi Ben Othmane · 2016
Node.js heavily relies on shared variables. Their manipulation can cause service interruption, confidential data leakage, and service behavior change. Such attacks can be performed out of third-party libraries without detection by the service. Identification of such attacks requires analysis of both, application and libraries code.