Russ Cox personal blog
What NPM should do to stop a new colors attack
Over the weekend, a developer named Marak Squires intentionally sabotaged his popular NPM package colors and his less popular package faker . As I write this, NPM claims 18,971 direct dependents for colors and 2,751 for faker . Open Source Insights counts at least 42,000 more indirect dependents for colors . Many…
- Points
- 237
- HN comments
- 672
- Submissions
- 1
- Cited by
- 0 commenters
Security & PrivacyOpen Source2022
On Hacker News
| Submitted | Title on HN | Points | Comments |
|---|---|---|---|
| Jan 10, 2022 | What NPM should do to stop a new colors attack by mfrw | 237 | 672 |
