Ax Sharma / BleepingComputer:
GitHub finds major security flaws, now fixed, in Node.js package manager npm that would let attackers bypass authentication and publish versions of any package — The largest software registry of Node.js packages, npm, has disclosed multiple security flaws that were identified and remedied recently.
from Techmeme https://ift.tt/3no1I0e