I’ll be covering the #AppleEvent for the next hour, ok? It’s part of one of my still fiat jobs 🤣 so… sorry for the spam. Not really sorry. I love Apple!
LET’S GO!
This is exactly how the npm attackers broke into maintainer accounts and slipped their malicious code into the ecosystem.
Can you spot the vulnerability they exploited?