Every story and comment from the Hacker News API, in a layout borrowed from 2001.
A comment on NPM debug and chalk packages compromised. Parent comment
1. It's an extra step: before you pwn the package, you need to pwn a domain.
2. When a domain is pwned, the packages it signs can be revoked with a single command.
There are no comments on this comment yet.
1. It's an extra step: before you pwn the package, you need to pwn a domain.
2. When a domain is pwned, the packages it signs can be revoked with a single command.