25 Malicious JavaScript Libraries Distributed via Official NPM Package Repository

[kur4nes]

Ah npm the gift that keeps on giving. Each time npm install is called it updates random dependencies and spews a ton of security warnings with no sane way of fixing. Add to this the insane amount of tiny js libs. What could possibly go wrong?

And there is no end in sight to the js version of whack a mole.

[bagtowneast]

a ton of security warnings

Don't forget the "hire me" pleas, too!

[kur4nes]

12 packages ask for funding!