News for hackers. Stuff that matters.

A comment on NPM packages from Red Hat have been compromised. Parent comment

Re:NPM packages from Red Hat have been compromised by wg0 on Monday June 01, 2026 @11:36AM (#48358272)
If everybody starts to delay for 3 days, wouldn't it be the case that everyone would discover it on the 3rd day?
[ Parent | on HN ]
Re:NPM packages from Red Hat have been compromised by cortesoft on Monday June 01, 2026 @11:37AM (#48358289)
Vulnerability scanners and security researchers would be looking those first 3 days
[ Parent | on HN ]
Re:NPM packages from Red Hat have been compromised by pixl97 on Monday June 01, 2026 @12:25PM (#48358998)
Most attacks are discovered 'pretty quickly' via scanning services and groups that monitor repositories. The problem is even an hour gap could mean tens of thousands of downloads and executions.
[ Parent | on HN ]