logoalt Hacker News

Rapzid • today at 9:08 AM • 1 reply • view on HN

Viewed through the lens of Zod's responsibilities and processes I'd say a release was absolutely compromised. They cut and submitted a compromised release to npm; npm just happened to block the publishing.


Replies

calyhre • today at 9:10 AM

No it was never published. Only `nubjs/nub` was. You can read more on the write-up -> https://github.com/orgs/community/discussions/208477

➕ show 1 reply