Re:Axios Compromised on NPM – Malicious Versions Drop Remote...
by tytho on Tuesday March 31, 2026 @08:26AM
(#47586323)
At least with pnpm, you can specify minimumReleaseAgeExclude, temporarily until the time passes. I imagine the other package managers have similar options.
[1]: https://pnpm.io/settings#minimumreleaseageexclude