News for hackers. Stuff that matters.
Re:Self Propagating NPM Malware Compromises over 40 Packages by user34283 on Wednesday September 17, 2025 @06:47AM (#45274141)
Do tell: how many packages are in your dependency graph?

I bet it's hundreds.

Jest alone adds 300 packages.

Consequently I doubt that you in fact "thoroughly and fully" analyzed all your dependencies.

Unless what you're shipping isn't a feature rich app, what you proposed seems entirely unrealistic.

There are no comments on this comment yet.