News for hackers. Stuff that matters.
Re:Axios Compromised on NPM – Malicious Versions Drop Remote... by otterley on Tuesday March 31, 2026 @10:23AM (#47587842)
What, in your view, is a better solution?
Re:Axios Compromised on NPM – Malicious Versions Drop Remote... by staticassertion on Tuesday March 31, 2026 @11:12AM (#47588535)
There are many options. Here's a post just briefly listing a few of the ones that would be handled by package managers and registries, but there are also many things that would be best done in CI pipelines as well.

https://news.ycombinator.com/item?id=47586241