Sebezhetőség az NPM tárolóban, amely lehetővé teszi az ügynök hozzáadását megerősítés nélkül.
A security issue has been identified in the NPM package repository that allows a package owner to add any user as a maintainer without obtaining that user's consent or informing them of the action taken. The problem is exacerbated by the fact that after adding an external user as a maintainer, the original author of the package could remove themselves from the list of maintainers, leaving the external user as the sole person responsible […]
