Welcome • User Guide
ToS • Privacy • Canary
Donate • Bugs • License

©2025 Poal.co

128

Dropped out of the news, guess I don't know where to look. Curious since I was looking into TypeScript and it seemed npm was the preferred method.

https://docs.npmjs.com/threats-and-mitigations doesn't mention anything about it in particular

Dropped out of the news, guess I don't know where to look. Curious since I was looking into TypeScript and it seemed npm was the preferred method. https://docs.npmjs.com/threats-and-mitigations doesn't mention anything about it in particular
[–] • 2 pts

I haven’t heard any updates, but I don’t think it’s a solvable issue for Node.js.

One thing we can do as developers is move to Deno and use it as our JavaScript package manager. It can install packages from NPM, and it runs server side JavaScript in a sandbox by default so the NPM package installation exploits will not work.