2 ms·
These malicious packages are being caught by the authors, and by automated package security scanners, not just by end users. npm should start setting this 7 day
by omcnoe 6mo ago
These malicious packages are being caught by the authors, and by automated package security scanners, not just by end users. npm should start setting this 7 day cooldown as default.
- andix 6mo agoEven 12 hours would probably be enough. Those automatic malware scanning companies are getting really fast.