You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
That user is not related to Atomico, but I don't think it's phishing, since the README file attached to that project is generated by the npm init atomico script.
I think user Monoharada just didn't edit the README that is attached by default.
Now, to avoid future confusion, I'll edit the README to be more nominative of a starter kit.
Thank you for your issue, I will be attentive to what you need
Hi, my name is Tamir and I'm a security researcher at Mend.io
I have noticed something strange, I would be happy to get clarifications from you.
the package https://www.npmjs.com/package/atomico-base is pretending to be atomico, while also pretending to be @UpperCod , the creator of Atomico.
the npm user also does not match https://www.npmjs.com/~uppercod
Thanks in advance!
The text was updated successfully, but these errors were encountered: