Re: updates: I was just thinking of waiting a few weeks on the updates to allow ... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

		clbrmbr 4 months ago \| parent \| context \| favorite \| on: You too can run malware from NPM (I mean without c... Re: updates: I was just thinking of waiting a few weeks on the updates to allow compromised packages to be discovered.

naugtur 4 months ago [–]

socket.dev will find most malware within hours of it being published.

with LavaMoat most malware won't work even if you don't detect it.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact