3 ms·
Who is worrying? If JavaScript is on the front end the supply chain attacks are really not your problem.
by deadbabe 2mo ago
Who is worrying? If JavaScript is on the front end the supply chain attacks are really not your problem.
- traverseda 2mo agoWhat? It handles your password fields.
- cpburns2009 2mo agoThe supply chain attacks you need to worry about come from using npm.
- Rohansi 2mo agoNo, it's not specifically npm. All package managers enable remote code execution by design - you tell it to download code and then you run that code, likely without sandboxing, by using it. Most people are not inspecting the code before they download and run it. You will still see compromised packages making their way through npm even though they disabled install scripts.
- cpburns2009 2mo agoI agree. I just pointed out npm because it's the most prominent javascript one.