Malicious code in the purescript NPM installer

Re:Malicious code in the purescript NPM installer by buzzerbetrayed on Sunday July 28, 2019 @06:57PM (#20550290)

So by looking at a tiny fraction of the 1 million+ npm libraries, and articles by a few dozen people on the internet, you are able to conclude that the

> vast majority of JS developers don't seem to be aware of the rest of the software universe

Forgive me if I dismiss this as business-as-usual JS bashing

[ Parent | on HN ]

Re:Malicious code in the purescript NPM installer by Fellshard on Sunday July 28, 2019 @07:02PM (#20550302)

There is a difference between arbitrary bashing and giving concrete points of concern. I would hope such criticism would not be dismissed out of hand.

[ Parent | on HN ]

Re:Malicious code in the purescript NPM installer by yawaramin on Sunday July 28, 2019 @09:20PM (#20550803)

What concrete points of concern? I don't see any...?

[ Parent | on HN ]

Re:Malicious code in the purescript NPM installer by hnbroseph on Sunday July 28, 2019 @09:36PM (#20550865)

sure, it's just sampling.

[ Parent | on HN ]