Hacker News new | past | comments | ask | show | jobs | submit
jonchurch_ | on: Keyv and friends compromised in active Shai-Hulud supply chain attack
npm v12 released last month also defaults into blocking them by default