News for hackers. Stuff that matters.

A comment on What NPM should do to stop a new colors attack. Parent comment

Re:What NPM should do to stop a new colors attack by foobiekr on Monday January 10, 2022 @05:59PM (#29884197)
People who were pulling this unvetted and live are lucky he did not sell it to a malware group.
[ Parent | on HN ]
Re:What NPM should do to stop a new colors attack by UnFleshedOne on Monday January 10, 2022 @09:11PM (#29886347)
Malice or selling out is not even required. Malware groups are perfectly capable of getting access to maintainer credentials themselves if needed.
[ Parent | on HN ]
Re:What NPM should do to stop a new colors attack by foobiekr on Tuesday January 11, 2022 @12:36AM (#29887984)
Yes, I agree.
[ Parent | on HN ]