nostr:nprofile1qy2hwumn8ghj7un9d3shjtnyd968gmewwp6kyqpq0anhx6f586ax8kvsxv92d3rt0vzu467esyjmmwewmvysqewj6dqqzhymgt Yep, and the staged malware dependency. No longer an active threat, but a hunting proj...
@nprofile1q... i have to cover my devs, my servers, my customers... having npm dive on the grenade says a lot... that is enormous... they learned a lot from Shai Halud. Package providers have a much bigger responsibility than they expected...