WhiteSource report warns of NPM registry risks

The popular NPM registry of JavaScript packages was described as a playground for malicious actors by software scanning services provider WhiteSource Software, which has published a report of its vulnerability analysis of the registry.

Read more at InfoWorld