So what happens when the spam is detected? Are the packages removed? | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

		werdnapk on March 30, 2023 \| parent \| context \| favorite \| on: 50% of new NPM packages are spam So what happens when the spam is detected? Are the packages removed?

andreimarinescu on March 30, 2023 [–]

I've been monitoring NPMJS for a few months now. Up until Feb 28th they had a very close handle on these packages and removed them in around 8 hours. We're seeing these packages stay online for a lot longer now (and the volume is much higher)

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact