The popular package manager for software developers has been vulnerable to this attack vector for a while, and negligent in fixing the problem, according to a former employee.
Related Posts
This story was originally published by Grist. Sign up for…