News for hackers. Stuff that matters.
Re:Backdoor in event-stream library dependency by lmm on Tuesday November 27, 2018 @04:28AM (#18540846)
> Would you have distrusted this maintainer though? If someone takes it over and publishes what appear to be real bug-fixes, I'd imagine most people would trust them.

Quite possibly. But I'd make a conscious decision to do it, and certainly wouldn't be in any position to blame the original maintainer.

There are no comments on this comment yet.