Resident PulserB to Pulse of TruthEnglish · 17 days agoHundreds of code libraries posted to NPM try to install malware on dev machinesarstechnica.comexternal-linkmessage-square1fedilinkarrow-up16arrow-down10file-textcross-posted to: programming@programming.devtechnology@lemmy.worldcybersecurity@sh.itjust.works
arrow-up16arrow-down1external-linkHundreds of code libraries posted to NPM try to install malware on dev machinesarstechnica.comResident PulserB to Pulse of TruthEnglish · 17 days agomessage-square1fedilinkfile-textcross-posted to: programming@programming.devtechnology@lemmy.worldcybersecurity@sh.itjust.works
minus-squarehorse_battery_staple@lemmy.worldlinkfedilinkEnglisharrow-up2·17 days agoAll I ever read about NPM are supply chain attacks. Honest question, why is that so?