Now all the malware can move from the install script to the module itself where ... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

peterkelly 73 days ago | parent | context | favorite | on: Upcoming breaking changes for npm v12

Now all the malware can move from the install script to the module itself where it will inevitably still be run

hinkley 72 days ago [–]

But at least we have ways now to stay a week behind everyone else and see how many people drop dead before us.

So what it'll really be is people injecting exploits that are patient.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact