Hacker News new | ask | show | jobs
by emerged 3083 days ago
I left an Ethereum related project precisely because of the house of cards feel of it being built off JS and npm modules. They're a great example of how a project can be exploited by a malicious module which could proceed to extract all the tokens.

If my hat is black, I'm writing a daemon which monitors relevant npm modules and uploads subtlely modified versions if and when the possibility to do so occurs again. Particularly, but not only, targeting crypto currencies.

1 comments

> If my hat is black, I'm writing a daemon which monitors relevant npm modules and uploads subtlely modified versions ...

I started sketching out one yesterday, and then thought "What am I going to do with this? Probably just get in trouble" so I stopped.