Embedded malware in RC (NPM package)

Re:Embedded malware in RC (NPM package) by qwerty2021 on Friday November 05, 2021 @02:48PM (#29123281)

>Command line argument parsing

20-30 LoC maybe. `process.argv.slice(2).forEach(str => ... )`.

there is no access to the raw command-line invocation, sadly, so you really can't really do anything fancier than that.

>config loading

that thing "RC" package does - looking up the config file in random locations - is really strange to me. aren't you the one in control of where it is stored?

[ Parent | on HN ]

Re:Embedded malware in RC (NPM package) by afavour on Friday November 05, 2021 @04:34PM (#29124437)

Just looking at the readme for Coa it’s very obviously more than the code you outlined. You’re arguing against a strawman here.

[ Parent | on HN ]

Re:Embedded malware in RC (NPM package) by qwerty2021 on Friday November 05, 2021 @05:16PM (#29124832)

honestly, yeah. I just saw "command line parser" and dismissed the rest as useless bloat

[ Parent | on HN ]