3 ms·
> [...] and published it to npm under the same name. We have seen thes so many times, and still do not want to do _anything_ against this attack vector. So sad
by chrisandchris 1y ago
> [...] and published it to npm under the same name.
We have seen thes so many times, and still do not want to do _anything_ against this attack vector. So sad to look at.
- cyanydeez 1y agoId say LLMs are the generic attack vector.
- chrisandchris 1y agoNo, npm allpwing account takeovers and re-using package names like it's sharing a sandwich, that's the issue. This problem exists longer than the word "LLM".