News for hackers. Stuff that matters.

A comment on NPM packages from Red Hat have been compromised. Parent comment

Re:NPM packages from Red Hat have been compromised by Someone1234 on Monday June 01, 2026 @12:13PM (#48358824)
> IMO, the hyperbole here hurts because it distracts from more effective efforts.

For example?

[ Parent | on HN ]
Re:NPM packages from Red Hat have been compromised by megous on Monday June 01, 2026 @01:22PM (#48359852)
Can I just run npm update diff and see all changes across all updates compared to the last reviewed code in node_modules? Why not?
[ Parent | on HN ]