GitHub pulls pin on npm’s auto-run scripts

Shai-Hulud worm exploited exactly this. Better late than never, says everyone except the malware authors

This article has been indexed from www.theregister.com – Articles

Read the original article: