Re:50% of new NPM packages are spam
by werdnapk on Thursday March 30, 2023 @07:35AM
(#35371086)
So what happens when the spam is detected? Are the packages removed?
[ Parent
| on HN ]
Re:50% of new NPM packages are spam
by andreimarinescu on Thursday March 30, 2023 @07:47AM
(#35371175)
I've been monitoring NPMJS for a few months now. Up until Feb 28th they had a very close handle on these packages and removed them in around 8 hours. We're seeing these packages stay online for a lot longer now (and the volume is much higher)