npm security update: Attack campaign using stolen OAuth tokens
npm’s impact analysis of the attack campaign using stolen OAuth tokens and additional findings.
Author
GO
Greg Ose
2 articles by Greg Ose.
2 articles by Greg Ose.
npm’s impact analysis of the attack campaign using stolen OAuth tokens and additional findings.
GitHub’s bug bounty program is now a mature component of how we improve product security. We’re excited to highlight some achievements (and interesting vulnerabilities)!