Vulnerability #319816 – npm fails to restrict the actions of malicious packages

Posted by sebastianmck on 2016-03-26 · kb.cert.org

Discussion record

The captured thread is incomplete, so Clue is withholding a summary rather than presenting a partial account as complete.

The summary gate never changes the score, comment count, story metadata, or retained-history figures above.