NPM
“You now have this ongoing security incident and nobody of any particular clear authority being able to take control of it. That's a lot of chaos”
The malicious code creates a 'cascading compromise effect' into dependent ecosystems across npm's registry.
Protect yourself from malicious "phish" swimming upstream in OSS package consumption.
Security
|
Aug 03, 2022
"No-one has the time or sanity to audit every thing every build process pulls in."