News for hackers. Stuff that matters.

A comment on Snyk security researcher deploys malicious NPM packages targeting Cursor.com. Parent comment

Re:Snyk security researcher deploys malicious NPM packages t... by TheRealBrianF on Tuesday January 14, 2025 @03:17PM (#42703227)
You're referring to what I described previously here... ironically back when the first dependency confusion research was published: https://www.sonatype.com/blog/why-namespacing-matters-in-pub...
[ Parent | on HN ]
Re:Snyk security researcher deploys malicious NPM packages t... by gunnarmorling on Wednesday January 15, 2025 @04:06AM (#42708897)
Thanks, Brian! Big kudos to you and Sonatype for the service you provide to the Java community.
[ Parent | on HN ]