3 ms·
I admittedly pulled the numbers out of thin air, and things I thought I’d seen before. Had a second to sit down, and I _way_ overestimated my counts. Per NPM
by elcerebro 3y ago
I admittedly pulled the numbers out of thin air, and things I thought I’d seen before.
Had a second to sit down, and I _way_ overestimated my counts.
Per NPM there are 2,480,373 packages. According to Whitesource [1] there are an average of 12.3 versions per package. This gives us a total of 30,508,587.9 archives to scan. At a cost of $1B to scan that means each package would cost $33.959…
There’s no way that’s reality. That seems like several orders of magnitude too high.
1. https://threatpost.com/malicious-npm-packages-web-apps/178137/ https://threatpost.com/malicious-npm-packages-web-apps/17813...