cyrano@piefed.social to Technology@lemmy.worldEnglish · 11 个月前Shai-Hulud Returns: Over 300 NPM Packages Infectedhelixguard.aiexternal-linkmessage-square12linkfedilinkarrow-up184arrow-down13file-textcross-posted to: hackernews@lemmy.bestiver.se
arrow-up181arrow-down1external-linkShai-Hulud Returns: Over 300 NPM Packages Infectedhelixguard.aicyrano@piefed.social to Technology@lemmy.worldEnglish · 11 个月前message-square12linkfedilinkfile-textcross-posted to: hackernews@lemmy.bestiver.se
minus-squareEldritch@piefed.worldlinkfedilinkEnglisharrow-up5·11 个月前Arch checking in. It may happen less. But it still does.
minus-squareorclev@lemmy.worldlinkfedilinkEnglisharrow-up8·11 个月前To be fair to Arch, the AUR was always advertised as a caveat emptor type thing. It never really claimed to be secure in the first place.
It happens in python pip too.
Arch checking in. It may happen less. But it still does.
To be fair to Arch, the AUR was always advertised as a caveat emptor type thing. It never really claimed to be secure in the first place.
That is fair.