Live data from Hacker News

NPM publish-time malware scanning and dual-use metadata

Post reply on HN

Print view View original

1–4 of 4 posts

NPM publish-time malware scanning and dual-use metadata

#1

Post by Bobaso » Wed, Jul 29, 2026, 11:51 AM UTC

NPM publish-time malware scanning and dual-use metadata
github.blog

Re: NPM publish-time malware scanning and dual-use metadata

#2

Post by Hackbraten » Wed, Jul 29, 2026, 11:57 AM UTC

> a package may be published as […] held for manual review

Manual review by whom?

Re: NPM publish-time malware scanning and dual-use metadata

#3

Post by Bobaso » Wed, Jul 29, 2026, 12:06 PM UTC

Hackbraten wrote: post #2

> a package may be published as […] held for manual review Manual review by whom?

Microsoft owns NPM. Microsoft employee I guess ?

Re: NPM publish-time malware scanning and dual-use metadata

#4

Post by exploraz » Wed, Jul 29, 2026, 1:06 PM UTC

Earlier: https://news.ycombinator.com/item?id=49092172

Post reply on HN