News for hackers. Stuff that matters.

A comment on Offical XRP NPM package has been compromised and key stealing malware introduced. Parent comment

Re:Offical XRP NPM package has been compromised and key stea... by tough on Tuesday April 22, 2025 @04:03PM (#43765715)
does the postinstall script step has anything to do with this?

i noticed bun doesn't run them by default unless you whitelist them

[ Parent | on HN ]

There are no comments on this comment yet.