Hacker News
new
|
past
|
comments
|
ask
|
show
|
jobs
|
submit
login
jve
11 months ago
|
parent
|
context
|
favorite
| on:
DuckDB NPM packages 1.3.3 and 1.29.2 compromised w...
You're not doing business with NPM by pushing packages there.
And who is going to do anything about fixing their stuff when you pay them a mere subscription fee?
Guidelines
|
FAQ
|
Lists
|
API
|
Security
|
Legal
|
Apply to YC
|
Contact
Search:
And who is going to do anything about fixing their stuff when you pay them a mere subscription fee?