News for hackers. Stuff that matters.
Re:Malicious crossenv package on npm by TeMPOraL on Wednesday August 02, 2017 @05:50AM (#14909265)
I suppose that to get an estimate of the number of actual users, you have to scale that number of downloads down by a factor of 10 - 1000, depending on if and what kind of dependency cache JS toolchains use (esp. around CI/CD).

But yeah, everyone contacing an author directly doesn't scale at all.

There are no comments on this comment yet.