Reposted
a post on Twitter
Post details
If you use Travis or Heroku you might want to consider all your code in GitHub compromised and your packages in NPM compromised. Nasty nasty stuff. github.blog/2022-04-15-sec…Chris Johnson (@c_f_johnson)Sat, 16 Apr 2022 01:45 +0000