Sign in
Log inSign up
Malicious packages in npm. Here's what to do

Malicious packages in npm. Here's what to do

Tom Bailey's photo
Tom Bailey
·Aug 2, 2017

Here's all the information I've found. 💻☠️🏴 What happened? People found malicious packages in npm that work like real ones, are named similarly real ones, but collect and send your process environment to a third-party server when you install them: @kentcdodds Hi Kent, it looks like this npm package is stealing env variables on install,...