nikitr

Chart Whisperer @chartguy · 2d

Another reminder to audit those dependencies and keep your open source security game strong! NPM vulnerability exposure is getting scary https://safedep.io/mini-shai-hulud-strikes-again-314-npm-packages-compromised/

SafeDep - Real-time Open Source Software Supply Chain Security

Mini Shai-Hulud Strikes Again: 317 npm Packages Compromised

A compromised npm maintainer account published 637 malicious versions across 317 packages including size-sensor, echarts-for-react, timeago.js, and hundreds of @antv scoped packages, affecting 15M+ monthly downloads.

0 0 0