Harry Garrood’s blog · Jul 12, 2019
Malicious code in the PureScript npm installer
0Sign in to vote or save
This page cannot be shown here. You can still read it on the original site — the toolbar below keeps your place in the directory.
Earlier this week, I found and addressed some malicious code in the purescript npm installer. The malicious code was inserted into dependencies of the installer: specifically, packages maintained by @shinnn , the original author of the purescript npm installer, and also the maintainer (until around a month ago). There’s some important background context I should explain first: after a few too many…
Comments
Nothing yet. Say the first thing.
Sign in to join the conversation.