Comment by handstitched

3 months ago

OP is the developer & maintainer of the affected packages, so the attacker was able to use their phished credentials to upload compromised versions to NPM.

1 comment