News for hackers. Stuff that matters.

A comment on Marak's GitHub account suspended after he erased his faker project.

Re:Marak's GitHub account suspended after he erased his fake... by cr3ative on Friday January 07, 2022 @08:08AM (#29838658)
Without getting in to the conspiracy theories or watching someone's YouTube, it appears the (oft controversial) author rug-pulled a popular npmjs package.

This is probably Github doing damage control / fixing up build pipelines for everyone while they figure out next steps.

[ Parent | on HN ]
Re:Marak's GitHub account suspended after he erased his fake... by foragerr on Friday January 07, 2022 @08:30AM (#29838844)
But npm already did the damage control and restored an older version, fixing all broken CI pipelines.

What does any of this have everything to do with GitHub?

[ Parent | on HN ]
Re:Marak's GitHub account suspended after he erased his fake... by JimDabell on Sunday January 09, 2022 @11:06PM (#29870503)
You know NPM isn’t the only way to install JavaScript packages, right? You can add a GitHub repository directly. Yanking the NPM package doesn’t protect people who are pulling from GitHub directly.
[ Parent | on HN ]
Re:Marak's GitHub account suspended after he erased his fake... by cr3ative on Friday January 07, 2022 @08:43AM (#29838987)
It's a suspicious action, so probably locking the account down until they can get in touch and confirm that's what the user wanted to do, and wasn't hacked etc. Could even be automated between npm and github, a compromise warning or similar. All conjecture though.
[ Parent | on HN ]
Re:Marak's GitHub account suspended after he erased his fake... by A_non_e-moose on Saturday January 08, 2022 @02:34AM (#29849514)
Aren't npm and GH all owned by Microsoft anyway?
[ Parent | on HN ]
Re:Marak's GitHub account suspended after he erased his fake... by miltonlaxer on Sunday January 09, 2022 @06:43PM (#29868683)
Yes GH and NPM are part of the same company Microsoft
[ Parent | on HN ]