Re:Snyk security researcher deploys malicious NPM packages t...
by arkadiyt on Monday January 13, 2025 @10:20PM
(#42693149)
> If that's the case, then there's not much to see here
They could have demonstrated the POC without sending data about the installing host, including all your environment variables, upstream. That seems like crossing the line
They could have demonstrated the POC without sending data about the installing host, including all your environment variables, upstream. That seems like crossing the line