Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Didn't something similar happen last year? I think it was packages with similar names.


Yeah, there have been multiple typo-squatting incidents.

http://blog.npmjs.org/post/163723642530/crossenv-malware-on-...




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: