# Should this be of concern - WRT NPM?

**URL:** <https://discourse.nodered.org/t/should-this-be-of-concern-wrt-npm/52788>\
**Category:** General\
**Created:** [26 October 2021 21:12 UTC](https://discourse.nodered.org/t/should-this-be-of-concern-wrt-npm/52788 "2021-10-26T21:12:57Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![Trying\_to\_learn](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/trying_to_learn/32/28400_2.png) [@Trying\_to\_learn](https://discourse.nodered.org/u/Trying_to_learn)\
**Post date:** [26 October 2021 21:12 UTC](https://discourse.nodered.org/t/should-this-be-of-concern-wrt-npm/52788/1 "2021-10-26T21:12:57Z")

</div>

Sorry if this is very off topic, but I found it:

[NPM compromised.](https://hackaday.com/2021/10/22/supply-chain-attack-npm-library-used-by-facebook-and-others-was-compromised/)

---

<div class="post-metadata">

**Author:** ![knolleary](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/knolleary/32/3_2.png) [@knolleary](https://discourse.nodered.org/u/knolleary)\
**Post date:** [26 October 2021 21:19 UTC](https://discourse.nodered.org/t/should-this-be-of-concern-wrt-npm/52788/2 "2021-10-26T21:19:32Z")

</div>

It isn't a module we use in Node-RED.

---

<div class="post-metadata">

**Author:** ![TotallyInformation](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/totallyinformation/32/31_2.png) [@TotallyInformation](https://discourse.nodered.org/u/TotallyInformation)\
**Post date:** [26 October 2021 21:22 UTC](https://discourse.nodered.org/t/should-this-be-of-concern-wrt-npm/52788/3 "2021-10-26T21:22:58Z")

</div>

A good reminder for authors of nodes to make use of GitHub's excellent security check extensions that report when a dependency is compromised and should be updated.

---

<div class="post-metadata">

**Author:** ![Trying\_to\_learn](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/trying_to_learn/32/28400_2.png) [@Trying\_to\_learn](https://discourse.nodered.org/u/Trying_to_learn)\
**Post date:** [26 October 2021 21:31 UTC](https://discourse.nodered.org/t/should-this-be-of-concern-wrt-npm/52788/4 "2021-10-26T21:31:43Z")

</div>

Ok, sorry if this was a _WOLF_ call.

I am going through doing catch up on things and I read the intro and it mentioned `NPM`.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/flex026/uploads/nodered/original/1X/d073cd938eafa2e558d7c2cd59003b3ef4963033.png) [@system](https://discourse.nodered.org/u/system)\
**Post date:** [9 November 2021 21:32 UTC](https://discourse.nodered.org/t/should-this-be-of-concern-wrt-npm/52788/5 "2021-11-09T21:32:09Z")

</div>

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.