News for hackers. Stuff that matters.

A comment on Malicious crossenv package on npm. Parent comment

Re:Malicious crossenv package on npm by danjoc on Tuesday August 01, 2017 @06:53PM (#14906243)
Exactly what I thought. You can't name one. Coincidentally, Maven central requires GPG signatures.
[ Parent | on HN ]
Re:Malicious crossenv package on npm by KirinDave on Tuesday August 01, 2017 @07:00PM (#14906282)
As we all know you can only sign a piece of code if it is free of malicious software.

Heck, I read that you can't even make a GPG key without proving your virtue to Richard Stallman in festivus-style competition.

[ Parent | on HN ]