Back to emschwartz's feed

GitHub pulls pin on npm's auto-run scripts (opens in new tab) 聽馃攢JJ 聽Content type: News

theregister.com路路Hacker News路Covered by tldr.tech路Covers: Pnpm: Fast, disk space efficient package manager路Open original (opens in new tab)

Shai-Hulud worm exploited exactly this. Better late than never, says everyone except the malware authors

Read the original article
Sign in to keep reading the full article.
Sign UpLog In

Cited by 1 article

Nottingham Uni Breached 馃彨, Exchange Email Spoofing 鉁夛笍, GitHub pulls npm auto-run 馃摝

tldr.tech路

Keyboard Shortcuts

Navigation

Next / previous item
j/k
Open post
oorEnter
Preview post
v

Post Actions

Love post
a
Like post
l
Dislike post
d
Undo reaction
u
Save / unsave
s

Recommendations

Add interest / feed
Enter
Not interested
x

Go to

Home
gh
Interests
gi
Feeds
gf
Likes
gl
History
gy
Changelog
gc
Settings
gs
Browse
gb
Search
/

General

Show this help
?
Submit feedback
!
Close modal / unfocus
Esc

Press ? anytime to show this help