NPM audit passes malicious packages with no CVE

by ComCat | View on Hacker News