Unverified NPM Account Takeover Vulnerability for Sale on Dark Web Forum

socket.dev

53 pointsfeross4 comments

> Any claims originating from this source should be treated with a healthy amount of skepticism, due to the possibility of scams.

From a zero rep user too…

If ShinyHunters reposts it then I will take it serious.

is selling bunk on dark net marketplaces lucrative? since all the security researchers and journalists have to buy it

I'd say you just answered your own question, there.

as i understand it, payments are usually sent incrementally over a period of time, especially for 0days.

this helps to prevent reselling or disclosure