单个PR劫持了NPM注册表...

来源: Fireship (视频)

原文

💾

Try Seer Agent for free - https://sentry.io/fireship. It uses all of Sentry's context on your app to investigate production issues for you.

Earlier this week Tanstack was poisoned with a sophisticated supply chain attack . In this video we break down how it happened and how you can protect yourself in the future.

#coding #programming

Want more Fireship?

🗞️ Newsletter: https://bytes.dev
🧠 Courses: https://fireship.dev