No way to prevent this, says only CI platform (owned by the same company who own... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

rdg1991 77 days ago | parent | context | favorite | on: Postmortem: TanStack NPM supply-chain compromise

No way to prevent this, says only CI platform (owned by the same company who owns the package manager) where this regularly happens.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact