Clearly more could have been done. It's suspicious that they'd only grab npm tok... | Hacker News

Hacker News new | past | comments | ask | show | jobs | submit

login

joeandaverde on July 13, 2018 | parent | context | favorite | on: Postmortem for Malicious Packages Published on Jul...

Clearly more could have been done. It's suspicious that they'd only grab npm tokens. Perhaps the responsible party just wanted to prove a point?

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact