4 ms·
You can mitigate against those kinds of attacks using npm's `--before` option: npm i --before=`date -I -d '-5 days'` It will only install packages releas
by stagas 5y ago
You can mitigate against those kinds of attacks using npm's `--before` option:
npm i --before=`date -I -d '-5 days'`
It will only install packages released before the specified date.
- manquer 5y agoThis exposes another threat vector, you would no longer receive patches for discovered as soon as they are available.