News for hackers. Stuff that matters.

A comment on Malicious crossenv package on npm. Parent comment

Re:Malicious crossenv package on npm by KirinDave on Tuesday August 01, 2017 @07:41PM (#14906544)
Maybe I just don't understand, so could you explain to me how gpg signatures actually fix this problem? Would they fix this problem for npm?

I'm asking about the specific attack detailed in the tweet.

[ Parent | on HN ]

There are no comments on this comment yet.