Self Propagating NPM Malware Compromises over 40 Packages

Re:Self Propagating NPM Malware Compromises over 40 Packages by bdcravens on Tuesday September 16, 2025 @08:19AM (#45261240)

Then write it. Javascript itself isn't the problem, naive third-party dependencies are.

[ Parent | on HN ]

Re:Self Propagating NPM Malware Compromises over 40 Packages by pixl97 on Tuesday September 16, 2025 @10:56AM (#45263178)

Developers are perfectly fine with writing insecure JS all by themselves.

[ Parent | on HN ]

Re:Self Propagating NPM Malware Compromises over 40 Packages by yawaramin on Wednesday September 17, 2025 @09:11PM (#45283673)

But developers don't typically write malware to deploy on their production systems.

[ Parent | on HN ]