Hacker News Reader

Is one day enough to find vulnerabilities? Who keeps an eye on new releases? Otherwise the problem continues to exist, just delayed by one day.

There’s almost a dozen cybersecurity companies scanning NPM publishes in real-time and analysing them.