this post was submitted on 05 Jun 2026
11 points (100.0% liked)

Security

6965 readers
6 users here now

Confidentiality Integrity Availability

founded 6 years ago
MODERATORS
gary_host_laptop@lemmy.ml
11
New IronWorm malware hits 36 packages in npm supply-chain attack (www.bleepingcomputer.com)
submitted 3 weeks ago by yogthos@lemmy.ml to c/security@lemmy.ml
3 comments fedilink hide all child comments
you are viewing a single comment's thread
view the rest of the comments
[–] iByteABit@lemmy.ml 2 points 3 weeks ago

Didn't they add a new security measure just a week ago that now requires additional manual verification from the developer before a new version is distributed by npm?