DEV Community

Discussion on: npm package discovered to have bitcoin-stealing backdoor

Collapse
 
elmuerte profile image
Michiel Hendriks

This is a serious security risk we've all been dealing with in open source.

That's right. In propriety software you cannot even deal with it. It cannot easily be detected, and once detected you cannot fix it yourself.