Resident Pulser@infosec.pubB to Pulse of Truth@infosec.pubEnglish · 20 hours agoHundreds of code libraries posted to NPM try to install malware on dev machinesarstechnica.comexternal-linkmessage-square1fedilinkarrow-up15arrow-down10file-textcross-posted to: technology@lemmy.worldprogramming@programming.devcybersecurity@sh.itjust.worksarstechnica_index@rss.ponder.cat
arrow-up15arrow-down1external-linkHundreds of code libraries posted to NPM try to install malware on dev machinesarstechnica.comResident Pulser@infosec.pubB to Pulse of Truth@infosec.pubEnglish · 20 hours agomessage-square1fedilinkfile-textcross-posted to: technology@lemmy.worldprogramming@programming.devcybersecurity@sh.itjust.worksarstechnica_index@rss.ponder.cat
minus-squarehorse_battery_staple@lemmy.worldlinkfedilinkEnglisharrow-up2·20 hours agoAll I ever read about NPM are supply chain attacks. Honest question, why is that so?