4 ms·
Title is a bit misleading. Actual content title is 'Do not underestimate credentials leaks.' The article states that many popular Node.js packages have had le
by givehimagun 11y ago
Title is a bit misleading. Actual content title is 'Do not underestimate credentials leaks.'
The article states that many popular Node.js packages have had leaks (in the past). Also, this article was not the source of many of these leaks (example: bower's github oauth token was expired by github itself when it was posted to the website).
- ChALkeR 11y agoWhile it was not me who posted this to the Hacker News (so don't blame me for the title here), I can assure you that all mentioned credentials were active at the time when I found them.