NPM Plagued With 'Manifest Confusion' Malware-Hiding Weakness

The popular package manager for software developers has been vulnerable to this attack vector for a while, and negligent in fixing the problem, according to a former employee.

attack attack vector developers employee malware manager manifest npm package package manager popular problem software software developers vulnerable weakness