NPM publish-time malware scanning and dual-use metadata

5 pointsposted 4 hours ago
by Bobaso
(github.blog)

3 Comments

Hackbraten

4 hours ago

> a package may be published as […] held for manual review

Manual review by whom?

Bobaso

4 hours ago

Microsoft owns NPM. Microsoft employee I guess ?