News for hackers. Stuff that matters.

A comment on Self Propagating NPM Malware Compromises over 40 Packages. Parent comment

Re:Self Propagating NPM Malware Compromises over 40 Packages by paulddraper on Tuesday September 16, 2025 @02:48PM (#45266234)
npm has always downloaded to the current directory.
[ Parent | on HN ]
Re:Self Propagating NPM Malware Compromises over 40 Packages by Maskawanian on Thursday September 18, 2025 @11:00AM (#45290542)
That isn't the same as vendor-izing unless you are committing node_modules to your VCS, which would be insane.
[ Parent | on HN ]