NPM publish-time malware scanning and dual-use metadata

5 points by Bobaso a month ago · 3 comments

Reader

2 threads

exploraz a month ago

Earlier: https://news.ycombinator.com/item?id=49092172

Hackbraten a month ago

> a package may be published as […] held for manual review

Manual review by whom?

BobasoOP a month ago

Microsoft owns NPM. Microsoft employee I guess ?