News for hackers. Stuff that matters.

A comment on Postmortem: TanStack npm supply-chain compromise. Parent comment

Re:Postmortem: TanStack npm supply-chain compromise by sheept on Tuesday May 12, 2026 @01:36AM (#48104578)
In some cases, you can also use forks to read commits from private forks[0], but GitHub considers these linked commit networks working as intended.

[0]: https://trufflesecurity.com/blog/anyone-can-access-deleted-a...

[ Parent | on HN ]
Re:Postmortem: TanStack npm supply-chain compromise by sozforex on Tuesday May 12, 2026 @03:23AM (#48105261)
This is a very worthy article. I have an impression that I've read it before 2024, but maybe that was a different article describing the same mess with how github exposes private repos.
[ Parent | on HN ]