3 ms·

https://twitter.com/lrvick/status/1523827220023853057 https://twitter.com/lrvick/status/1523827220023853057 If you're trying to protect people, why release an

https://twitter.com/lrvick/status/1523827220023853057 https://twitter.com/lrvick/status/1523827220023853057 If you're trying to protect people, why release an exploit straight to the public instead of responsibly disclosing? Edit: Looks like it's already known, hard to know that from the tweet context.

progval 4y ago
It's not a new one. https://news.ycombinator.com/item?id=30403848 https://news.ycombinator.com/item?id=30403848 was exactly the same exploit.
NicolaiS 4y ago
The issue has been publicly known for years. The more focus we can get the better - hopefully NPM will add MFA at some point...