79
Shai-Hulud Returns: Over 300 NPM Packages Infected (helixguard.ai)
submitted 11 months ago by to c/technology@lemmy.world
12 comments fedilink hide all child comments
 

cross-posted from: https://lemmy.bestiver.se/post/758000

Comments

you are viewing a single comment's thread
view the rest of the comments
[–] 15 points 11 months ago (5 children)

Real question? Is it really isolated to npm or is there a few lessons others could take and discover their own vulnerabilities?

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 5 child comments
    •
  • [–] 12 points 11 months ago (3 children)

    It happens in python pip too.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 3 child comments
    •
  • [–] 5 points 11 months ago (2 children)

    Arch checking in. It may happen less. But it still does.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 8 points 11 months ago

    Python and Ruby have both had various repo issues too.

    I've never heard of anything similar with Perl, but that may partly be because applications for new developers who want to join CPAN still appear to be processed by humans, with up to a couple of weeks lag. The time inefficiency plus the language being less popular probably makes it an unattractive target.

  • permalink
  • fedilink
  • source
  • parent