News for hackers. Stuff that matters.

A comment on Oh no, not again a meditation on NPM supply chain attacks. Parent comment

Re:Oh no, not again a meditation on NPM supply chain attacks by mr90210 on Wednesday September 17, 2025 @07:51AM (#45274667)
> It's a stretch to pin blame on Microsoft. They're probably the reason the service is still up at all.

I reckon that the ecosystem would have been much healthier if NPM had not been kept running without the care it requires.

[ Parent | on HN ]
Re:Oh no, not again a meditation on NPM supply chain attacks by 2d8a875f-39a2-4 on Wednesday September 17, 2025 @08:44AM (#45275180)
I did wonder about that. Maybe yeah. It's likely that several no-better forks would have sprung up right away.
[ Parent | on HN ]