writeups.xyz / Threat Alert: Private npm Packages Disclosed via Timing Attacks

Submitter : c2a

Date: 12 October 2022

Bounty : undisclosed

Vulnerabilities :

• Timing Attack
• Supply Chain Attack

Programs :

• GitHub

Authors :

• Yakir Kadkoda

Link :
https://blog.aquasec.com/private-packages-disclosed-via-timing-attack-on-npm