RoseSecurity - Overview
RoseSecurity has 24 repositories available. Follow their code on GitHub.
Welcome to Transitive Dependency Hell
rosesecurity.devAt 00:21 UTC on March 31, someone published axios@1.14.1 to npm. Three hours later it was pulled. In between, every npm install and npx invocation that resolved axios@latest executed a backdoor on the installing machine. Axios has roughly 80 million weekly downloads, and here’s what that three-hour window looked like from one developer’s MacBook.