2 ms·
A new version of website squatting? There can't be very much money in npm package squatting, though.
by noobermin 10y ago
A new version of website squatting? There can't be very much money in npm package squatting, though.
- WaxProlix 10y agoA fellow poster up a bit mentioned that the empty 'D' package has something like 64k downloads per day. Surely there's money in compromising the systems that this ends up on? Malicious packages are a known point of vulnerability, and with that broad a shot, you're likely to get access to at least a few apps / AWS accounts / whatever.