23pds (山哥)
@im23pds
Joined June 2014
6K Following 15.2K Followers
NPM 互联网上最成功的俄罗斯套娃命令…大坑
NPM让前端进入万物皆包的时代，每天都在npm install… 装个业务20M，能装几千个依赖 2.3G，而且你永远不知道自己装的是什么，这些依赖有没有人维护、有没有被投毒🤣
Show more
UPDATE: So far we've identified 639 compromised npm package versions across 323 unique packages in tonight’s Mini Shai-Hulud wave.
That includes 558 versions across 279 unique @antv packages. Most were detected within ~6 minutes of publication.
Show more
