You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
@@ -87,6 +88,7 @@ or inderictly (builds process/testing)
87
88
|**nodejs/deps¹**| Write | If you have write access to Node.js dependencies you can hide malicious code and publish a new version, eventually the automation will create a PR to sync to nodejs/core and this code might pass without supervision |
88
89
|**nodejs/build** (GH) | - | N\A |
89
90
|**nodejs/node-core-utils**| Write | User must have _Write_ access to nodejs/node to open a attack vector|
91
+
|**nodejs/nodejs.org**| - | N\A |
90
92
|**npm account**| Write | Because you can change the node-core-utils/branch-diff code to inject malicious code |
0 commit comments