NPM registry prank leaves developers unable to unpublish packages

www.scmagazine.com

NPM registry prank leaves developers unable to unpublish packages

www.scmagazine.com

git [he/him, comrade/them]@hexbear.netM to programming@hexbear.netEnglish · 10 months ago

Could threat actors leverage “dependency hell” to exploit open-source software repositories?

You must log in or # to comment.

Chat

programming@hexbear.net

Create a post

You are not logged in. However you can subscribe from another Fediverse account, for example Lemmy or Mastodon. To do this, paste the following into the search field of your instance: !programming@hexbear.net

Post about programming, interesting repos, learning to program, etc. Let’s try to keep free software posts in the c/libre comm unless the post is about the programming/is to the repo.
Do not doxx yourself by posting a repo that is yours and in any way leads to your personally identifying information. Use reports if necessary to alert mods to a potential doxxing.
Be kind, keep struggle sessions focused on the topic of programming.

Visibility: Public

This community can be federated to other instances and be posted/commented in by their users.

12 users / day
12 users / week
12 users / month
12 users / 6 months
0 local subscribers
114 subscribers
28 Posts
0 Comments
Modlog