News for hackers. Stuff that matters.
Re:ESLint compromised, may have stolen your credentials by ricardobeat on Thursday July 12, 2018 @02:38PM (#17517391)
That's a terrible article (such a blind view on async I/O), and totally unrelated to the security model of package managers.
Re:ESLint compromised, may have stolen your credentials by Jach on Thursday July 12, 2018 @03:10PM (#17517660)
I did say it was about Node, not NPM, but you're right on the article quality too. I even used Node after reading that post..and liked it. But actually I was wrong to even associate it with Zed's post, since Zed's post is mainly about the community and not about the technology. I inferred the call for a similar post on NPM to be technology related and pattern matched on the wrong dimension of "poorly received ranty criticism" entirely! Oh well.