Manual verification of releases and chain-of-trust systems help a lot. See for e... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

mzl 11 months ago | parent | context | favorite | on: Shai-Hulud malware attack: Tinycolor and over 40 N...

Manual verification of releases and chain-of-trust systems help a lot. See for example https://lucumr.pocoo.org/2019/7/29/dependency-scaling/

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact