News for hackers. Stuff that matters.
Re:Malicious code in the purescript NPM installer by littlestymaar on Monday July 29, 2019 @05:38AM (#20552889)
> It should've been `@shinn/purescript` and the compiler developers just create their own `@whatever/purescript`.

And how is a user supposed to make the difference between @legit_dev/package_name and something like @nlegit_dev/package ?

Namespacing makes name-squatting way easier, not harder.

There are no comments on this comment yet.