News for hackers. Stuff that matters.

A comment on Snyk security researcher deploys malicious NPM packages targeting Cursor.com. Parent comment

Re:Snyk security researcher deploys malicious NPM packages t... by Szpadel on Tuesday January 14, 2025 @07:03AM (#42696240)
wouldn't capturing only env names without values be ideal middle ground?

look we had access to your Aws tokens, we could take over your account but we didn't steal actual token, we just got proof that we could access it

[ Parent | on HN ]
Re:Snyk security researcher deploys malicious NPM packages t... by reubenmorais on Tuesday January 14, 2025 @12:37PM (#42700707)
Yes I agree names only would have been a better approach here.
[ Parent | on HN ]