NPM package compromised by author: erases files on RU / BY computers on install

Re:NPM package compromised by author: erases files on RU / B... by jaimex2 on Wednesday March 16, 2022 @07:52PM (#30705697)

Upto a court to decide. Turns out he's in California which has laws against writing and distributing malicious code.

He's looking at state level:

if charged as a misdemeanor, the crime is punishable by: imprisonment in county jail for up to one year, and/or a maximum fine of $5,000.6

If charged as a felony, the offense is punishable by: imprisonment for up to three years, and/or a maximum fine of $10,000.7

Federal charges I'm not sure about.

[ Parent | on HN ]

Re:NPM package compromised by author: erases files on RU / B... by mannerheim on Thursday March 17, 2022 @06:27PM (#30716582)

Laws are enforced by people. I doubt any prosecutors will care, and if there are, I doubt any jury will convict.

[ Parent | on HN ]

Re:NPM package compromised by author: erases files on RU / B... by sva_ on Wednesday March 16, 2022 @08:03PM (#30705812)

Whats up with the .6 and .7?

[ Parent | on HN ]

Re:NPM package compromised by author: erases files on RU / B... by Adraghast on Wednesday March 16, 2022 @09:00PM (#30706238)

Probably section numbers that copied and pasted weirdly.

[ Parent | on HN ]

Re:NPM package compromised by author: erases files on RU / B... by planetree on Thursday March 17, 2022 @07:05AM (#30709751)

inflation

[ Parent | on HN ]