writeups.xyz / Package Planting: Are You [Unknowingly] Maintaining Poisoned Packages?

Submitter : c2a

Date: 26 April 2022

Bounty : undisclosed

Vulnerabilities :

• Logic Flaw

Programs :

• GitHub

Authors :

• Yakir Kadkoda

Link :
https://blog.aquasec.com/npm-package-planting