3 ms·

GitHub announced this a while back: https://github.blog/changelog/2026-07-28-npm-publish-time-malware-scanning-and-dual-use-metadata/ https://github.blog/chang

• drakythe 2mo ago
  "A while back" -- One week ago. I am curious if they are still implementing the process or if this particular attacker already figured out a way around it.
• twistedpair 2mo ago
  Ah, I see your problem there > This requirement will be progressively enforced over time.