News for hackers. Stuff that matters.

A comment on Malicious code in the purescript NPM installer. Parent comment

Re:Malicious code in the purescript NPM installer by nameiscubanpete on Sunday July 28, 2019 @10:57PM (#20551196)
That was my first thought. But then I realized some guy basically broke something so his stuff would work and someone else's wouldn't. He didn't destroy files, but that was malicious as hell.
[ Parent | on HN ]
Re:Malicious code in the purescript NPM installer by a-dub on Sunday July 28, 2019 @11:06PM (#20551226)
mean spirited and dramatic as hell, yes... also, a bad place where real "malicious" things could be done. but "malicious" has a specific meaning and this didn't affect users.

more like dramaticious if you ask me... but also uncovers actual dangerous weaknesses in the npm delivery pipeline...

[ Parent | on HN ]
Re:Malicious code in the purescript NPM installer by a-dub on Sunday July 28, 2019 @11:13PM (#20551258)
it's kinda like a cat-fight in the one hundred acre javascript wood... pretty harmless, nobody's shit got pwned, but holy shit, kind of a vulnerable vector they found...
[ Parent | on HN ]