Re:We All Dodged a Bullet
by brazzy on Tuesday September 09, 2025 @06:19PM
(#45190114)
I feel attacked.
And very, very happy that we're proxying all access to npm through Artifactory, which allowed us to block the affected versions and verify that they were in fact never pulled by any of our builds.
Re:We All Dodged a Bullet
by Aeolun on Wednesday September 10, 2025 @12:05AM
(#45193127)
Only problem is the artifactory instance is on the other side if the world instead of behind the convenient npmjs CDN, so installing packages takes 5x longer..
And very, very happy that we're proxying all access to npm through Artifactory, which allowed us to block the affected versions and verify that they were in fact never pulled by any of our builds.