News for hackers. Stuff that matters.

A comment on NPM packages from Red Hat have been compromised. Parent comment

Re:NPM packages from Red Hat have been compromised by JoshTriplett on Monday June 01, 2026 @09:49AM (#48356839)
A large array of automated and semi-automated security scanners are finding things quickly. The main benefit of waiting before updating is to give those scanners time to work.
[ Parent | on HN ]
Re:NPM packages from Red Hat have been compromised by genxy on Monday June 01, 2026 @11:05AM (#48357820)
Would be nice if cargo had a cooldown flag and could respect lockfiles by default.
[ Parent | on HN ]
Re:NPM packages from Red Hat have been compromised by dbdr on Monday June 01, 2026 @12:35PM (#48359142)
min-publish-age in cargo is coming:

https://github.com/rust-lang/rfcs/blob/master/text/3923-carg...

[ Parent | on HN ]