FRESH

Hacker News

Six JavaScript zero-day bugs lead to fears of supply chain attack

10 points by Bender

by move-on-by

0 subcomment

These are not JavaScript zero-day bugs, they are tooling bugs.

    researchers said the new bypass bugs were found in npm, pnpm, vlt, and Bun.