Mantine-datatable npm package compromised after account takeover

Mantine-datatable npm package compromised after account takeover

Hacker News·4d·icflorescu

The maintainer of mantine-datatable lost control of their GitHub account, allowing attackers to push malicious code to the npm package. This is a sobering reminder that open-source maintainers are high-value targets—and that relying on a single person to guard the keys to widely-used libraries is a structural vulnerability.

Share𝕏Reddit

Related stories