#opensourcerisks — Public Fediverse posts

The rise of malicious npm packages—like `xlsx-to-json-lh` mimicking `xlsx-to-json-lc`—raises urgent questions. Should npm enforce name uniqueness and vetting to stop supply chain attacks, or risk stifling its open ecosystem? #NpmSecurity #OpenSourceRisks #Cybersecurity

https://saysomething.hashnode.dev/npms-security-dilemma-how-malicious-packages-exploit-openness-and-the-path-forward