Explain the attack that gets mitigated by reading the diff of a lockfile?
Every major npm attack I can think of essentially follows the pattern of "version X.Y.Z is secretly evil". How does seeing [email protected] in your lockfile alert you to that?
Every major npm attack I can think of essentially follows the pattern of "version X.Y.Z is secretly evil". How does seeing [email protected] in your lockfile alert you to that?