Re:What NPM should do to stop a new colors attack
by taberiand on Monday January 10, 2022 @09:47PM
(#29886723)
Everyone who had code that broke due to this (and, really, everyone else too) should see it as a clear wake up call that they need to do better managing their dependencies.
[ Parent
| on HN ]
Re:What NPM should do to stop a new colors attack
by lolinder on Monday January 10, 2022 @09:53PM
(#29886776)
Yes. Just like everyone who gets ransomware on their computers should see it as a clear wake-up call to improve their security practices. It doesn't mean we shouldn't also condemn the attack that prompted the wake-up call.