News for hackers. Stuff that matters.
Re:GitHub has completed its acquisition of NPM by JMTQp8lwXL on Wednesday April 15, 2020 @11:18PM (#22885695)
I am curious what proportion of compromised packages fall under the umbrella of scenarios you have outlined.
Re:GitHub has completed its acquisition of NPM by sytse on Thursday April 16, 2020 @12:27AM (#22886039)
Me too. If someone has data on predictors of compromised packages I’m all ears.