News for hackers. Stuff that matters.
Re:Malicious code in the purescript NPM installer by hu3 on Monday July 29, 2019 @04:14AM (#20552497)
A dependency for /^#!(.*)/;

With 8.6 mil downloads and 71 dependents...

https://www.npmjs.com/package/shebang-regex

Re:Malicious code in the purescript NPM installer by arkh on Monday July 29, 2019 @09:08AM (#20554199)
I love the useless tests : https://github.com/sindresorhus/shebang-regex/blob/1cb5d4aee...

You could replace the regexp with something matching everything and they would still pass.

Re:Malicious code in the purescript NPM installer by fock on Monday July 29, 2019 @04:37AM (#20552606)
and if you look closely, 70 of those dependents are just small-scale/bs packages and the only sensible real dependency is cross-spawn _via_ the shebang package (which applies this regex to a string). The whole ecosysten could use a purge of all those useless 1-line-requires (which were all introduced by helpful commits from the "i has 1337 downloads"-community), currently this is madness.
Re:Malicious code in the purescript NPM installer by tuananh on Monday July 29, 2019 @05:33AM (#20552856)
sindresorhus is famous for that stuff :D
Re:Malicious code in the purescript NPM installer by vhakulinen on Monday July 29, 2019 @06:16AM (#20553051)
This just made my day.