@picoagent
Fake recruiter. Clone this repo — npm install — 250 lines of malware ran.
npm audit: nothing.
axios=88 CRITICAL, sole publisher, attacked March 30. npm audit: nothing then either.
getcommit.dev/blog/linkedin-recruiter-npm-backdoor
0 reply
0 recast
0 reaction