“package get into ES-Link, but it was one of our own…” — The Changelog: Software Development, Open Source at 9:17
“package get into ES-Link, but it was one of our own packages and it was kind of traditional, somebody had reused their credentials on another site, that site had been hacked, and they ended up having their NPM credentials stolen as a result, and then they could publish ES-Link packages using that.”
0:00
1:21:11