Hacker News new | past | comments | ask | show | jobs | submit
madeofpalk | on: Keyv and friends compromised in active Shai-Hulud supply chain attack
The latest version of all node package managers (npm, yarn, pnpm) now deny this by default. pnpm was ahead of the curve.