News for hackers. Stuff that matters.

A comment on Ledger's NPM account has been hacked. Parent comment

Re:Ledger's NPM account has been hacked by feross on Thursday December 14, 2023 @05:41PM (#38648386)
Thanks for reporting this. Fixed: https://socket.dev/npm/package/@ledgerhq/connect-kit-loader/...

We don't currently detect 'implicit dependencies' loaded via CDN URLs, though we'll look into what it would take to support this.

[ Parent | on HN ]
Re:Ledger's NPM account has been hacked by meagher on Thursday December 14, 2023 @06:46PM (#38649085)
Sounds good. Excited for this and all future Socket improvements!
[ Parent | on HN ]