[stabbles]

Is one day enough to find vulnerabilities? Who keeps an eye on new releases? Otherwise the problem continues to exist, just delayed by one day.

[captn3m0]

There’s almost a dozen cybersecurity companies scanning NPM publishes in real-time and analysing them.