News for hackers. Stuff that matters.

A comment on ESLint compromised, may have stolen your credentials. Parent comment

Re:ESLint compromised, may have stolen your credentials by eptcyka on Thursday July 12, 2018 @03:24PM (#17517792)
Cargo is far better in this regard, for one.
[ Parent | on HN ]
Re:ESLint compromised, may have stolen your credentials by Arnavion on Thursday July 12, 2018 @05:35PM (#17518817)
Cargo packages can also execute arbitrary code at compile-time through build scripts, which run with full permissions of the original `cargo` command including filesystem and network access.
[ Parent | on HN ]