How not to publish malicious npm packagessnyk.io6 points·guypod··0 commentsOpen articleSaveView on HN