News for hackers. Stuff that matters.

A comment on Understand filesystem takeover vulnerabilities in NPM JavaScript package manager. Parent comment

Re:Understand filesystem takeover vulnerabilities in NPM Jav... by ergothus on Wednesday January 08, 2020 @12:46AM (#21988691)
I did that in the past, but now I can run "npx WHATEVER"

The only problem is that npx ALSO defaults to installing things, which is ridiculous.

[ Parent | on HN ]

There are no comments on this comment yet.