11
Axios Supply Chain Attack Pushes Cross-Platform RAT via Compromised npm Account (thehackernews.com)
submitted 7 months ago by to c/javascript@programming.dev
comment fedilink hide all child comments

no comments (yet)

sorted by: hot top controversial new old
there doesn't seem to be anything here
3 comments in c/programming@programming.dev view that post
[–] [S] 16 points 7 months ago

It gets better and better lol

  • permalink
  • fedilink
  • source
    •
    [–] 13 points 7 months ago

    I always advocate switching to pnpm where install scripts are disabled by default. It has plenty of security features to ward off most supply chain attacks.

  • permalink
  • fedilink
  • source
    •
    [–] 7 points 7 months ago

    Pre and post install hooks are a mistake, jfk

  • permalink
  • fedilink
  • source
    •