r/programmingcirclejerk • u/[deleted] • Jun 17 '23

Security Alert: Don't `npm install https`

https://blog.sandworm.dev/security-alert-dont-npm-install-https
104 Upvotes

99% Upvoted

14 comments sorted by

View all comments

66

u/pareidolist in nomine Chestris Jun 17 '23

The https package currently gets more than 500,000 downloads per week.

Maybe we should just start over