Show HN: A malicious NPM install reads your .env. On my Mac it reads a decoy

Find the plaintext secrets on your Mac and move them into an encrypted vault. Your files keep working, and only the command you run gets the real value. macOS, no account, no telemetry.
2 points by bukershok 37 days ago jitpass.com 0 comments
Summary not yet generated for this article.

Comments (0 of ) ⌛

Loading more comments... ⌛
Scroll down to load more comments
No comments available.
Type to search HN and engineering blog articles
Press Escape to close  |  ↑↓ to navigate  |  Enter to open