Re:NPM package compromised by author: erases files on RU / B...
by Volundr on Wednesday March 16, 2022 @11:04PM
(#30707195)
> This still goes to the heart of the obligations of maintainers.
I don't think this comes down to an "obligation" of open source maintainers. I think it's pretty evil of ANYONE to market software pretending it's one thing, when it reality it's malware. Open Source or not doesn't change that.
> It's the end user's fault for continuing to pull that source code and integrate it into their system.
More than one party can be at fault.
I don't think this comes down to an "obligation" of open source maintainers. I think it's pretty evil of ANYONE to market software pretending it's one thing, when it reality it's malware. Open Source or not doesn't change that.
> It's the end user's fault for continuing to pull that source code and integrate it into their system. More than one party can be at fault.