Malicious code added to 35k GitHub repos, leaking user environments

Re:Malicious code added to 35k GitHub repos, leaking user en... by drekipus on Wednesday August 03, 2022 @09:11AM (#32331226)

It's a good point actually.

I suppose the message is "read the code you're using" but that is hard for big libraries and frameworks.

Obviously using one's code where they are impersonating someone else is a big red flag.

[ Parent | on HN ]

Re:Malicious code added to 35k GitHub repos, leaking user en... by jollybean on Wednesday August 03, 2022 @03:52PM (#32336027)

Reading the code for functional integrity is already a big deal, but having to sleuth around for the sneacky hacks? No way.

I don't know what the answer is, but the model has to be changed.

[ Parent | on HN ]