dependency confusion

Where did these mysterious PrismJS npm versions come from?

Shedding light on mysterious 9000.0.x versions of PrismJS that had left everyone puzzled in 2015, and weren't removed until 2019.

3 years ago

Grayhat pollutes npm, PyPI with thousands of fake supply chain dependencies

A gray hat hacker has published over 7,000 dependency confusion packages to npm and PyPI repositories, and continues to post…

3 years ago

This website uses cookies.