News for hackers. Stuff that matters.

A comment on Lotusbail npm package found to be harvesting WhatsApp messages and contacts. Parent comment

Re:Lotusbail npm package found to be harvesting WhatsApp mes... by baq on Tuesday December 23, 2025 @10:22AM (#46366019)
still need to read them to make sure you don't vendor a trojan in the first place.
[ Parent | on HN ]
Re:Lotusbail npm package found to be harvesting WhatsApp mes... by throw-12-16 on Tuesday December 23, 2025 @10:49AM (#46366263)
auditing is the first step in vendoring a dep by my definition of the practice
[ Parent | on HN ]