The defense mechanisms that NPM introduced after the
'Shai-Hulud' supply-chain attacks have weaknesses that allow
threat actors to bypass them via Git dependencies. [...]
Hackers can bypass npm’s Shai-Hulud defenses via Git dependencies
Pensée du jour :
Ce que l'homme a fait ,
l'homme peut le défaire.
"No secure path in the world"
