News for hackers. Stuff that matters.

A comment on Axios Compromised on NPM – Malicious Versions Drop Remote Access Trojan. Parent comment

Re:Axios Compromised on NPM – Malicious Versions Drop Remote... by otterley on Tuesday March 31, 2026 @12:58PM (#47590277)
For those who didn't know what TUF means (like me), I think they're referring to The Update Framework (https://theupdateframework.io).
[ Parent | on HN ]
Re:Axios Compromised on NPM – Malicious Versions Drop Remote... by staticassertion on Tuesday March 31, 2026 @01:15PM (#47590527)
Sorry, I should have clarified that - you're correct. `cosign` is an example of a tool that makes this quite straightforward and proves that this sort of system can work today.
[ Parent | on HN ]