News for hackers. Stuff that matters.
Re:What NPM should do to stop a new colors attack by acdha on Monday January 10, 2022 @07:11PM (#29885118)
It’s deliberate sabotage and shipped as a routine update. If he’d walked away or made a breaking change in a major release, nobody would expect more.

Similarly, if it was a service everyone understands that those require money to operate but there’s no analogous reason to tell people to upgrade to deliberately broken code.

There are no comments on this comment yet.