On: Security issue related to the NPM registry

[marcus_holmes]

hehe...

CVE: "the entire javascript/ruby/python development model is insecure"

affected: "the whole damn internet"

resolution:"rewrite the last 10 years of internet developmet from scratch"

not sure that's gonna happen

[rbanffy → marcus_holmes]

At least the npm packages outside their telemetry horizon should be updated immediately.