ESLint-config-prettier briefly had few versions with malware published (github.com) 10 points by butz 1y ago ↗ HN
[–] butz 1y ago ↗ While issue is already fixed, it would be interesting to know what precautions should users of npm packages take to prevent running malware on their PC during npm package installation? [–] hansott 1y ago ↗ Only install npm dependencies in a Docker container, e.g. dev containers offers an easy way to do that (the speed on macOS isn't great but hey)Aikido scans all published npm packages in realtime: https://intel.aikido.dev/?tab=malware
[–] hansott 1y ago ↗ Only install npm dependencies in a Docker container, e.g. dev containers offers an easy way to do that (the speed on macOS isn't great but hey)Aikido scans all published npm packages in realtime: https://intel.aikido.dev/?tab=malware
2 comments
[ 3.6 ms ] story [ 18.5 ms ] threadAikido scans all published npm packages in realtime: https://intel.aikido.dev/?tab=malware