{"version":"1.0","type":"rich","provider_name":"techandbusiness.org","provider_url":"https://techandbusiness.org","title":"GitHub limits unvalidated npm publishing trust to 48 hours","author_name":"techandbusiness.org · Cybersecurity, Infrastructure","thumbnail_url":"https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh3aDWaWT6PmRDL9d6tHPDisxclb_Ak7YZIxuS02EUFvNaWrc4_UKwUqW0RI1KT3r8zsneOguD6b85yg8mf3gAzZZOGuLi-mXckG_yzwmXXb3IchTBSVeRvPlUo7QU4Kp4yiM6QqPshmo4p0GQ55XZPTEDc0DZn9N84S_ZibZ4rkXuhZ3OvoHNCYH-wk0k-/s1700-nu-rw-lo-l85-e365/git-npm.jpg","width":600,"height":400,"html":"<blockquote class=\"tb-newswire-embed\" style=\"max-width:600px;border-left:3px solid #22d3ee;padding:12px 16px;margin:0;font-family:-apple-system,system-ui,sans-serif;background:#09090b;border-radius:0 8px 8px 0;\">\n      <p style=\"margin:0 0 8px;font-size:10px;font-weight:600;letter-spacing:0.1em;color:#71717a;\">techandbusiness.org · Cybersecurity, Infrastructure</p>\n      <p style=\"margin:0 0 8px;font-size:18px;font-weight:700;line-height:1.3;color:#fff;\"><a href=\"https://techandbusiness.org/newswire/7rLNjDa5TAnRo3irYs5EBG\" style=\"color:#fff;text-decoration:none;\">GitHub limits unvalidated npm publishing trust to 48 hours</a></p>\n      <p style=\"margin:0;font-size:14px;color:#a1a1aa;line-height:1.5;\">GitHub has imposed a 48-hour expiry on unvalidated npm trusted publishing configurations after researchers found a way to publish versions of other users' packages without stealing credentials. A firs...</p>\n    </blockquote>"}