@stacklokhq : On July 22nd, our Trusty team flagged a malicious npm package, next-react-notify, shortly after it was published. This package is a modified version of the popular call-bind with an added malicious script. Our detection system identified suspicious metadata signals, revealing a • TwiCopy

Stacklok

@stacklokhq

+ Follow

Makers of open source and free-to-use tools for AI-curious developers. Find our most recent project here: codegate.ai

ID: 1649442398445903873

linkhttps://stacklok.com calendar_today21-04-2023 15:58:36

406 Tweet

495 Followers

75 Following

Stacklok

@stacklokhq

a year ago

On July 22nd, our Trusty team flagged a malicious npm package, next-react-notify, shortly after it was published. This package is a modified version of the popular call-bind with an added malicious script. Our detection system identified suspicious metadata signals, revealing a

thumb_up_off_alt2

chat_bubble_outline0

repeat2

shareShare