You too can run malware from NPM (I mean without consequences)

Re:You too can run malware from NPM (I mean without conseque... by bavarianbob on Tuesday September 09, 2025 @10:34AM (#45182510)

I've worked in software supply chain security for two years now and this is an extremely optimistic take. Nearly all organizations are not even remotely close to this level of responsiveness.

[ Parent | on HN ]

Re:You too can run malware from NPM (I mean without conseque... by naugtur on Monday September 15, 2025 @02:05PM (#45252966)

Again, that's why LavaMoat exists. Set it up once and it will block many classes of attacks regardless of where they come from.

[ Parent | on HN ]