News for hackers. Stuff that matters.

A comment on ESLint compromised, may have stolen your credentials. Parent comment

Re:ESLint compromised, may have stolen your credentials by maksymddd on Thursday July 12, 2018 @09:32AM (#17514282)
Yes, and then we will have to audit each update and each bugfix, right?
[ Parent | on HN ]
Re:ESLint compromised, may have stolen your credentials by codingdave on Thursday July 12, 2018 @09:57AM (#17514593)
Someone will need to, yes. Hopefully it would be a more centralized, trusted auditor.

But flip it around -- without such audits (the status quo), you don't know what code runs in your own codebase. Is that acceptable?

[ Parent | on HN ]