News for hackers. Stuff that matters.

A comment on $ sudo rm -rf / === NPM install. Parent comment

Re:$ sudo rm -rf / === NPM install by roblabla on Tuesday November 09, 2021 @08:24AM (#29161380)
The problem is rarely the author going rogue, but rather their accounts getting hacked, and the hacker pushing a malicious update to an existing package. Vetting the author won't really help, you need to vet the updates.
[ Parent | on HN ]

There are no comments on this comment yet.