GitHub finds major security flaws, now fixed, in Node.js package manager npm that would let attackers bypass authentication and publish versions of any package (Ax Sharma/BleepingComputer)

Ax Sharma / BleepingComputer:
GitHub finds major security flaws, now fixed, in Node.js package manager npm that would let attackers bypass authentication and publish versions of any package  —  The largest software registry of Node.js packages, npm, has disclosed multiple security flaws that were identified and remedied recently.

from Techmeme https://ift.tt/3no1I0e