Re: Idea for preventing malicious packages

[Aaron Liu]

There's been scanners that execute on hook like https://github.com/Sohimaster/traur . I'm not sure if they detect the npm attack.

--
Cheers,
Aᴀʀᴏɴ

OpenPGP_0xCBC3973CD9FC6A16.asc
Description: OpenPGP public key

OpenPGP_signature.asc
Description: OpenPGP digital signature