News for hackers. Stuff that matters.

A comment on Malicious crossenv package on npm. Parent comment

Re:Malicious crossenv package on npm by TrickyRick on Wednesday August 02, 2017 @07:29AM (#14909660)
Actually Maven Central has about 200K packages. Incidentally about the same number of packages by which npm has increased in the last year. So no, a hand-curated submission process is probably not reasonable

[1]: http://www.modulecounts.com

[ Parent | on HN ]
Re:Malicious crossenv package on npm by KirinDave on Wednesday August 02, 2017 @11:03AM (#14911095)
Thanks for bringing the numbers to this.

NPM is such a massive package repository, it's sort of a testament to the community that these sorts of things don't happen more often.

[ Parent | on HN ]