Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

No. Having many packages might not be the only reason to start an attack. This post shows it is/was possible in the Maven ecosystem: https://blog.oversecured.com/Introducing-MavenGate-a-supply-...


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: