writeups.xyz / The massive bug at the heart of the npm ecosystem

Submitter : c2a

Date: 27 June 2023

Bounty : undisclosed

Vulnerabilities :

• Supply Chain Attack
• Manifest Confusion

Programs :

• Undisclosed

Authors :

• Darcy Clarke (@Darcy)

Link :
https://blog.vlt.sh/blog/the-massive-hole-in-the-npm-ecosystem