Post #81 391 Feb 10, 2021, 20:29 UTC И в продолжение темы веселых взломов...https://twitter.com/iximiuz/status/1359599798278647808 Twitter Ivan Velichko That's wonderful! First, you recklessly list public and private packages in one package.json Then an attacker creates a public package with the exact same name as one of your private packages And now you're pulling their code to your DEV, CI, and PROD ht…