News for hackers. Stuff that matters.

A comment on Malicious PyPI packages stealing credit cards and injecting code. Parent comment

Re:Malicious PyPI packages stealing credit cards and injecti... by paulddraper on Tuesday August 03, 2021 @04:00PM (#28053428)
For quite a while now, the JS ecosystem has used lock files -- npm, yarn, pnpm. You have to got out of your way not to pin JS dependencies.
[ Parent | on HN ]

There are no comments on this comment yet.