News for hackers. Stuff that matters.

A comment on Why NPM lockfiles can be a security blindspot for injecting malicious modules.

Re:Why NPM lockfiles can be a security blindspot for injecti... by christopherbalz on Wednesday October 02, 2019 @04:20PM (#21140363)
Is this something that could/should be done by the package repositories such as npmjs.com?
[ Parent | on HN ]

There are no comments on this comment yet.