2 ms·

Dissecting NPM Malware: Five Packages and Their Evil Install Scripts

2 points by kiyanwang 4y ago

jruohonen 4y ago
The same well-known issues plague PyPI with setup.py. What I found perhaps more interesting is the Sandworm's finding that about a half of new npm packages are today SEO spam: https://blog.sandworm.dev/one-in-two-new-npm-packages-is-seo-spam-right-now https://blog.sandworm.dev/one-in-two-new-npm-packages-is-seo...