npm’s Phantom Gyp Worm Proves Signed Packages Aren’t Safe
The Miasma worm hit 57 npm packages in 5 days using a binding.gyp trick that bypasses --ignore-scripts. Here's what happened, what was stolen, ...
Latest tech industry news, product launches, and company announcements