Hacker News new | ask | show | jobs
by dschep 1558 days ago
I suspect OP conflated "I am reporting malware in a package on npmjs.com" with "I have discovered a bug or vulnerability in a package on npmjs.com." The later shows what they report[0] whereas the former does allow for a report to be made.

[0] https://imgur.com/VSZbZ0Q