News for hackers. Stuff that matters.
Re:Self Propagating NPM Malware Compromises over 40 Packages by user34283 on Wednesday September 17, 2025 @06:26AM (#45274000)
If someone is wondering how effective such an approach is going to be with npm, consider the following:

If you add jest, the popular test runner by Meta, that's adding 300 packages to your dependency graph.

And here we don't yet have a bundler, linter, code formatter, or even web framework.

So good luck with minimizing those dependencies.

There are no comments on this comment yet.