News for hackers. Stuff that matters.

A comment on NPM security update: Attack campaign using stolen OAuth tokens. Parent comment

Re:NPM security update: Attack campaign using stolen OAuth t... by er4hn on Friday May 27, 2022 @01:42PM (#31532449)
That is one thing that RFC8959 is intended to solve. If you see "secret-token:" in any logs after running tests you flag that as a problem and fail the test.
[ Parent | on HN ]
Re:NPM security update: Attack campaign using stolen OAuth t... by willcipriano on Friday May 27, 2022 @01:45PM (#31532476)
Thanks I assumed someone else must've had the same idea.
[ Parent | on HN ]