Package managers have an integrity problem
Trail of Bits tested 25 popular package managers against a malicious repository; fewer than half verified lockfile integrity and only Go verified signatures by default.
3
1 stories, newest first · one card per story
Trail of Bits tested 25 popular package managers against a malicious repository; fewer than half verified lockfile integrity and only Go verified signatures by default.
Today 2.2K readers · 2.7K views · 397 reads · all time 108K views