Sign Up
Welcome home! Here at WTMX you can make new friends and meet people with the same interests as you. All free and ad-free.
Development
Internet & Technology
Link: #415481
Development shared a link
“A misfeature in NPM’s design means that as soon as the sabotaged version of colors was published, fresh installs of command-line tools depending on colors immediately started using it, with no testin... View More
What NPM Should Do Today To Stop A New Colors Attack Tomorrow
Over the weekend, a developer named Marak Squires intentionally sabotaged his popular NPM package colors and his less popular package faker. As I write this, NPM claims 18,971 direct dependents for co...