{"action":"created","issue":{"url":"https://api.github.com/repos/sindresorhus/ama/issues/368","repository_url":"https://api.github.com/repos/sindresorhus/ama","labels_url":"https://api.github.com/repos/sindresorhus/ama/issues/368/labels{/name}","comments_url":"https://api.github.com/repos/sindresorhus/ama/issues/368/comments","events_url":"https://api.github.com/repos/sindresorhus/ama/issues/368/events","html_url":"https://github.com/sindresorhus/ama/issues/368","id":143311444,"number":368,"title":"Hacking a dev's machine by un-unpublishing an npm package","user":{"login":"unbug","id":799578,"avatar_url":"https://avatars.githubusercontent.com/u/799578?v=3","gravatar_id":"","url":"https://api.github.com/users/unbug","html_url":"https://github.com/unbug","followers_url":"https://api.github.com/users/unbug/followers","following_url":"https://api.github.com/users/unbug/following{/other_user}","gists_url":"https://api.github.com/users/unbug/gists{/gist_id}","starred_url":"https://api.github.com/users/unbug/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/unbug/subscriptions","organizations_url":"https://api.github.com/users/unbug/orgs","repos_url":"https://api.github.com/users/unbug/repos","events_url":"https://api.github.com/users/unbug/events{/privacy}","received_events_url":"https://api.github.com/users/unbug/received_events","type":"User","site_admin":false},"labels":[],"state":"closed","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":22,"created_at":"2016-03-24T17:33:45Z","updated_at":"2016-07-22T16:35:08Z","closed_at":"2016-04-01T13:32:10Z","body":"After I read this [kik, left-pad, and npm](http://blog.npmjs.org/post/141577284765/kik-left-pad-and-npm), I feel uneasy.LOST of dev has node install.So hacker can attack developer's machine by un-publish a good module and re-publish with a virus one.What can we do about this?"},"comment":{"url":"https://api.github.com/repos/sindresorhus/ama/issues/comments/234592358","html_url":"https://github.com/sindresorhus/ama/issues/368#issuecomment-234592358","issue_url":"https://api.github.com/repos/sindresorhus/ama/issues/368","id":234592358,"user":{"login":"sindresorhus","id":170270,"avatar_url":"https://avatars.githubusercontent.com/u/170270?v=3","gravatar_id":"","url":"https://api.github.com/users/sindresorhus","html_url":"https://github.com/sindresorhus","followers_url":"https://api.github.com/users/sindresorhus/followers","following_url":"https://api.github.com/users/sindresorhus/following{/other_user}","gists_url":"https://api.github.com/users/sindresorhus/gists{/gist_id}","starred_url":"https://api.github.com/users/sindresorhus/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/sindresorhus/subscriptions","organizations_url":"https://api.github.com/users/sindresorhus/orgs","repos_url":"https://api.github.com/users/sindresorhus/repos","events_url":"https://api.github.com/users/sindresorhus/events{/privacy}","received_events_url":"https://api.github.com/users/sindresorhus/received_events","type":"User","site_admin":false},"created_at":"2016-07-22T16:35:08Z","updated_at":"2016-07-22T16:35:08Z","body":"@bfred-it AFAIK that doesn't work for git dependencies, so you're still not totally safe."}}
{"actor":{"display_login":"sindresorhus"}}