News for hackers. Stuff that matters.

A comment on Malicious code in the purescript NPM installer. Parent comment

Re:Malicious code in the purescript NPM installer by ww520 on Sunday July 28, 2019 @08:52PM (#20550691)
But it's great for resume and portfolio.
[ Parent | on HN ]
Re:Malicious code in the purescript NPM installer by s_Hogg on Sunday July 28, 2019 @10:37PM (#20551115)
This is the problem - how to disincentivise that behaviour?
[ Parent | on HN ]
Re:Malicious code in the purescript NPM installer by throwaway66666 on Monday July 29, 2019 @12:52AM (#20551606)
Do not hire people who do this. Most of them will say "over 200m downloads of npm packages". Go and take a look. If you see things like 'is-not-foo, checks if a given string is not equal to the string "foo"', and 0 meaningful contributions, either pay no attention to these claims or pass.
[ Parent | on HN ]