News for hackers. Stuff that matters.

A comment on Npm operational incident, 6 Jan 2018. Parent comment

Re:Npm operational incident, 6 Jan 2018 by no29 on Sunday January 07, 2018 @03:33PM (#16092527)
it's beyond disingenuous and flat out dishonest for npm to say the integrity of the packages was never jeopardized. within minutes there were reports that packages had been replaced with questionable and malicious content.

https://news.ycombinator.com/item?id=16087079

this is probably a good indication of how a much more serious security event would be treated by the organization.. just sayin

[ Parent | on HN ]
Re:Npm operational incident, 6 Jan 2018 by mannykannot on Sunday January 07, 2018 @04:03PM (#16092692)
At the very least, Npm should explain why we can be sure the packages now offered are exactly the same as they were before the incident, if, in fact, it is in a position to make that claim.
[ Parent | on HN ]
Re:Npm operational incident, 6 Jan 2018 by strictnein on Sunday January 07, 2018 @06:03PM (#16093272)
Yeah, I have no idea how they can even pretend to claim that.
[ Parent | on HN ]