from Hacker News

Found a Vulnerability In NPM Package

by daudmalik06 on 1/13/22, 8:19 AM with 2 comments

• by heijmans on 1/13/22, 9:52 AM

  It was actually reported on (or before) Jan 3rd.

  See https://security.snyk.io/vuln/SNYK-JS-EXTEND2-2320315 .

• by daudmalik06 on 1/13/22, 8:19 AM

  A high severity vulnerability has been found in a widely used npm package "extend2" with over 46K weekly downloads.