News for hackers. Stuff that matters.

A comment on Backdoor in event-stream library dependency. Parent comment

Re:Backdoor in event-stream library dependency by pcnix on Monday November 26, 2018 @12:38PM (#18535138)
His responsibility as a maintainer is to signal when there's a change in power, since the package is trusted via his credentials.
[ Parent | on HN ]
Re:Backdoor in event-stream library dependency by perfunctory on Monday November 26, 2018 @02:25PM (#18536062)
> the package is trusted via his credentials.

Somebody really needs to explain to me how this works. The dude's bio on github is "antipodean wandering albatross". Nothing against it btw.

[ Parent | on HN ]