4 ms·

NPM publish-time malware scanning and dual-use metadata

• Hackbraten 2mo ago
  > a package may be published as […] held for manual review Manual review by whom?
  • Bobaso 2mo ago
    Microsoft owns NPM. Microsoft employee I guess ?
• exploraz 2mo ago
  Earlier: https://news.ycombinator.com/item?id=49092172 https://news.ycombinator.com/item?id=49092172