NPM belongs to Microsoft. What kind of security do you expect? | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

		amai 6 months ago \| parent \| context \| favorite \| on: Shai-Hulud malware attack: Tinycolor and over 40 N... NPM belongs to Microsoft. What kind of security do you expect?

pier25 6 months ago [–]

You're saying this as if big corps, banks, etc weren't using dotnet.

amai 6 months ago | [–]

They should not. Microsoft lost the master key to the Azure cloud in 2023. Just now they have this issue: https://www.wired.com/story/microsoft-entra-id-vulnerability...

MS stands for minimal security.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact