2 ms·
> published manually via a stolen npm access token with no OIDC binding and no gitHead So this and litellm one would’ve been preventable by proper config of OI
by 6thbit 6mo ago
> published manually via a stolen npm access token with no OIDC binding and no gitHead
So this and litellm one would’ve been preventable by proper config of OIDC Trusted Publishers.