Re:Embedded Malicious Code in node-ipc
by the42thdoctor on Sunday March 20, 2022 @07:26PM
(#30747902)
> Honest question, what can be done to address this type of issue?
Paid subscription-based NPM ? Yes, you could download a dependency directly from the repository on Github for free, but if do so through the paid NPM they assure you that the package is malware-free.
Paid subscription-based NPM ? Yes, you could download a dependency directly from the repository on Github for free, but if do so through the paid NPM they assure you that the package is malware-free.