News for hackers. Stuff that matters.

A comment on What NPM should do to stop a new colors attack. Parent comment

Re:What NPM should do to stop a new colors attack by rezonant on Monday January 10, 2022 @05:16PM (#29883557)
> Whats the intention here to cause someone harm?

The change has an infinite loop, so it literally breaks any software that uses it.

[ Parent | on HN ]
Re:What NPM should do to stop a new colors attack by sintaxi on Tuesday January 11, 2022 @12:03AM (#29887788)
Also the description, readme, and roadmap that was included in the package still passed it off as a functioning library which makes this a trojan.
[ Parent | on HN ]