A Dune-inspired worm recently hit CrowdStrike and npm, infecting hundreds of packages. Here's what happened - and how to protect your code.
It appears, however, that the developer took the legitimate code from the Postmark MCP server's GitHub repository, added the ...
A npm package copying the official 'postmark-mcp' project on GitHub turned bad with the latest update that added a single line of code to exfiltrate all its users' email communication.
Some results have been hidden because they may be inaccessible to you
Show inaccessible results
Feedback