News for hackers. Stuff that matters.

A comment on You too can run malware from NPM (I mean without consequences). Parent comment

Re:You too can run malware from NPM (I mean without conseque... by Cthulhu_ on Tuesday September 09, 2025 @10:13AM (#45182229)
I always thought this would be the ideal monetization path for NPM; enterprises pay them, NPM only supplies verified package releases, ideally delayed by hours/days after release so that anything that slips through the cracks has a chance to get caught.
[ Parent | on HN ]
Re:You too can run malware from NPM (I mean without conseque... by chrisweekly on Tuesday September 09, 2025 @10:21AM (#45182318)
Enterprises today typically use a custom registry, which can include any desired amount of scans and rigorous controls.
[ Parent | on HN ]
Re:You too can run malware from NPM (I mean without conseque... by johannes1234321 on Tuesday September 09, 2025 @02:09PM (#45185964)
That would put them into liability or be a quite worthless agreement taking no responsibility.
[ Parent | on HN ]