News for hackers. Stuff that matters.

A comment on What NPM should do to stop a new colors attack. Parent comment

Re:What NPM should do to stop a new colors attack by spankalee on Tuesday January 11, 2022 @03:07PM (#29897080)
They changed the package metadata only by setting `latest` to point to the last non-malicious version.

Can you actually point to any code - or any package contents at all - that they changed?

[ Parent | on HN ]

There are no comments on this comment yet.