News for hackers. Stuff that matters.

A comment on Backdooring Rust crates for fun and profit. Parent comment

Re:Backdooring Rust crates for fun and profit by roywashere on Thursday November 18, 2021 @12:45PM (#29268240)
Similarly, Perl has CPAN and system where if a module is unmaintained and the author unresponsive, new maintainers can be granted permission by admins to take over. This ensures the namespace is preserved, peoples dependencies keep getting updated.
[ Parent | on HN ]
Re:Backdooring Rust crates for fun and profit by cutemonster on Friday November 19, 2021 @05:07PM (#29283217)
> peoples dependencies keep getting updated.

Updated maybe with malware sometimes? Is it unbelievable that the admins sometimes would hand over an inactive module to the wrong person?

Maybe Perl is a less interesting target than npm so it works (so far) for them?

[ Parent | on HN ]