TGViewer
JavaScript JavaScript @javascript ยท 31K subscribers
Post #2237 4.88K
๐Ÿ•ต๏ธ ๐—ช๐—ฒ ๐—ฐ๐—ฎ๐˜‚๐—ด๐—ต๐˜ ๐Ÿ‡ฐ๐Ÿ‡ต๐—Ÿ๐—ฎ๐˜‡๐—ฎ๐—ฟ๐˜‚๐˜€ ๐—›๐—ฎ๐—ฐ๐—ธ๐—ถ๐—ป๐—ด ๐—š๐—ฟ๐—ผ๐˜‚๐—ฝ ๐—ฑ๐—ฒ๐—ฏ๐˜‚๐—ด๐—ด๐—ถ๐—ป๐—ด ๐˜๐—ต๐—ฒ๐—ถ๐—ฟ ๐—ผ๐˜„๐—ป ๐—บ๐—ฎ๐—น๐˜„๐—ฎ๐—ฟ๐—ฒ... ๐—ถ๐—ป ๐—ฟ๐—ฒ๐—ฎ๐—น ๐˜๐—ถ๐—บ๐—ฒ.

A couple of weeks ago, something unexpected happened. While monitoring malicious uploads to the NPM ecosystem, we stumbled on a suspicious package: react-html2pdf.js (now suspended). At first glance, it looked innocuous. ๐—ก๐—ผ ๐—น๐—ถ๐—ณ๐—ฒ๐—ฐ๐˜†๐—ฐ๐—น๐—ฒ ๐—ต๐—ผ๐—ผ๐—ธ๐˜€. ๐—ก๐—ผ ๐—ผ๐—ฏ๐˜ƒ๐—ถ๐—ผ๐˜‚๐˜€ ๐—บ๐—ฎ๐—น๐˜„๐—ฎ๐—ฟ๐—ฒ. Just a basic function in the index.js file.

Mackenzie Jackson
  • ๐Ÿค” 6
  • ๐Ÿคฃ 6
  • โค 2
More from @javascript
  1. Oct 8, 2026Post #3546
  2. Oct 8, 2026CHALLENGE function tag(strings, ...values) { return strings.raw.join('|') + '::' + values.โ€ฆ
  3. Oct 7, 2026Post #3544
  4. Oct 7, 2026CHALLENGE const sym1 = Symbol('id'); const sym2 = Symbol('id'); const obj = { [sym1]: 'firโ€ฆ
  5. Oct 6, 2026Post #3542
  6. Oct 6, 2026CHALLENGE async function* gen() { const x = yield 1; const y = yield x + 1; return x + y;โ€ฆ
Threads Profile ViewerView any public Threads profile without an account.Open ThreadLook โ†’Writing with AI? Make it sound human.Metric37 rewrites AI drafts so they read naturally. Free AI detector, 1,500 words free.Try Metric37 โ†’