News for hackers. Stuff that matters.

tapout1960

tapout1960 on Hacker News

Re:Empty NPM package '-' has over 700k downloads on Wednesday August 04, 2021 @09:46AM (#28060932)
can a newer version be used to introduce malicious code for those downloading or the dependents?
Re:Empty NPM package '-' has over 700k downloads on Monday August 02, 2021 @02:58PM (#28041130)
what is the risk here? auto update newer version of code?