Post

@npmx.dev idk if it would be useful to have a way of putting a message on a package that says: "hey maybe don't use this right now, we have reports from trusted sources that bad stuff is happening" like some kind of moderation for packages

11/5/26, 11:04 pm0 reposts13 likes

Corbin Crutchley

@crutchcorn.dev

12 May

We actually rolled this out within an hour of the GitHub issue reporting it. We `npm deprecated` every impacted package with a message pointing to the issue as we continued our investigation. We really really tried to limit the damage as quickly as we could. We're determined to win back confidence

Roman

@rman.dev

12 May

Socket integration would be cool