SecurityNode.js Blogabout 10 years ago
npm security updates v2.15.1 and v3.8.3
1 min read
npm released versions 2.15.1 and 3.8.3 to fix a bearer token vulnerability. The CLI sent tokens with every request instead of only to the registry, allowing attackers to collect tokens and impersonate users. Users should invalidate old tokens and run npm login.
Level
Hype check
Tap to vote and see what everyone thinks.
