Hacker News new | past | comments | ask | show | jobs | submit
cute_boi | on: Keyv and friends compromised in active Shai-Hulud supply chain attack
I think npm can use chatgpt/claude for each published package to detect these types of attack? And if it sees they can restrict the package from making any changes.
wolfi1 | parent
the remedy is worse than the disease