News for hackers. Stuff that matters.

A comment on Axios Compromised on NPM – Malicious Versions Drop Remote Access Trojan. Parent comment

Re:Axios Compromised on NPM – Malicious Versions Drop Remote... by jmward01 on Tuesday March 31, 2026 @12:43AM (#47582846)
I suspect most packages will keep a mix of people at 7 days and those with no limit. That being said, adding jitter by default would be good to these features.
[ Parent | on HN ]
Re:Axios Compromised on NPM – Malicious Versions Drop Remote... by Barbing on Tuesday March 31, 2026 @02:16AM (#47583389)
>adding jitter by default would be good

This became evident, what, perhaps a few years ago? Probably since childhood for some users here but just wondering what the holdup is. Lots of bad press could be avoided, or at least a little.

[ Parent | on HN ]