WTF? Right now, this post on HN is titled "Critical Vulnerabilities in Package Manager Revealed by Secret Scanning Research". That's nonsense. The title of the

WTF? Right now, this post on HN is titled "Critical Vulnerabilities in Package Manager Revealed by Secret Scanning Research". That's nonsense. The title of the linked Medium post is "Exposing Hidden Dangers: The Essential Guide to Secret Scanning in Package Repositories", and it is not about vulnerabilities in package managers as one would ordinarily understand that mean, but rather about scanning for secrets that have accidentally been published to package manager repositories. Am flagging simply for the misleading title. This would be unobjectionable (though IMO not very interesting) if the title were fixed.