News for hackers. Stuff that matters.

A comment on What NPM should do to stop a new colors attack. Parent comment

Re:What NPM should do to stop a new colors attack by kristjansson on Monday January 10, 2022 @11:11PM (#29887432)
Sure, he’s free to make new versions of it that do whatever he wants - spam zalgo, mine bitcoin, fire the mussels, whatever. That doesn’t obligate anyone to _use_ that code, nor does it obligate NPM or anyone to distribute it.
[ Parent | on HN ]
Re:What NPM should do to stop a new colors attack by sam0x17 on Friday January 14, 2022 @12:15PM (#29937133)
Nor does it give NPM permission to tamper with his code and pretend it was he who published it. I firmly believe what they did is in violation of the underlying open source license, and if it isn't, the major licenses should be updated to account for this concerning scenario.
[ Parent | on HN ]