greatestdevever

4 ms·

1. 1.▲
   by greatestdevever 1y ago

   oh! understood. thanks.
2. 2.▲
   by greatestdevever 1y ago

   Hey, new dev here. Sorry if this is a common knowledge and I am asking a stupid question. How does you getting phished affect these NPM packages? aren't these handled by NPM or the developers of them?
3. 3.▲
   by greatestdevever 1y ago

   insanely well-crafted. i mean, it's something bad that happened but one must recognise the wit of this attack.
4. 4.▲
   by greatestdevever 1y ago

   How I do it is, run npm list --all then check the completely dependency tree to find out if anywhere I am using the vulnerable package.
5. 5.▲
   by greatestdevever 1y ago

   I can not find the package anymore. I think someone did it already.