3 ms·
Malicious packages in NPM evade dependency detection through invisible URL links
- shehackspurple 11mo agoMore terrifying supply chain attacks against developers
- mystifyingpoi 11mo ago> To every automated security system, these packages show "0 Dependencies." With all the faults of npm, I fail to see that as npm fault. That sounds honestly like a security system fault. Why would an audit tool ignore a clearly defined dependency?