Post

@npmx.dev idk if it would be useful to have a way of putting a message on a package that says: "hey maybe don't use this right now, we have reports from trusted sources that bad stuff is happening" like some kind of moderation for packages

Corbin Crutchley

@crutchcorn.dev

We actually rolled this out within an hour of the GitHub issue reporting it. We `npm deprecated` every impacted package with a message pointing to the issue as we continued our investigation. We really really tried to limit the damage as quickly as we could. We're determined to win back confidence

12/5/26, 3:39 am0 reposts7 likes

No replies yet.