Re:Self Propagating NPM Malware Compromises over 40 Packages
by Ygg2 on Thursday September 18, 2025 @09:27AM
(#45289437)
> But how do we scale that to 1000 dependencies, and every one of their updates? What tools are there to help us, and does the community at large use them?
Run it for whatever you want to check, then have a lunch, it takes 10-30min.
It will list exactly how many organizations, and even individuals with publish rights are there. For turso there are 51 repositories, and 243 different individuals with publish rights.
Of course, this still doesn't group by github org and so on.
Use
Run it for whatever you want to check, then have a lunch, it takes 10-30min.It will list exactly how many organizations, and even individuals with publish rights are there. For turso there are 51 repositories, and 243 different individuals with publish rights.
Of course, this still doesn't group by github org and so on.