Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

NPM belongs to Microsoft. What kind of security do you expect?


You're saying this as if big corps, banks, etc weren't using dotnet.


They should not. Microsoft lost the master key to the Azure cloud in 2023. Just now they have this issue: https://www.wired.com/story/microsoft-entra-id-vulnerability...

MS stands for minimal security.




Consider applying for YC's Fall 2026 batch! Applications are open till July 27.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: