Comment on Tinycolor supply chain attack post-mortemparentComments−Scaevolus11moI was confused too. Was it your npm token stored in angulartics2 as a Github Actions secret, so it could publish new angulartics2 versions?−STRiDEXOP11moYes, exactly.
Comments
I was confused too. Was it your npm token stored in angulartics2 as a Github Actions secret, so it could publish new angulartics2 versions?
Yes, exactly.