Lance R. Vick ( @lrvick@mastodon.social )
lrvick
1. Buy expired NPM maintainer email domains.2. Re-create maintainer emails3. Take over packages4. Submit legitimate security patches that include package.json version bumps to malicious dependency you pushed5. Enjoy world domination.
Read more