News for hackers. Stuff that matters.
Re:So what’s next (personal news from developer of popular C... by cyral on Monday February 13, 2023 @09:13PM (#34784272)
Your first paragraph reminded me of this article: https://david-gilbertson.medium.com/im-harvesting-credit-car... Imagine this scenario taking place with this package if someone got ahold of his NPM account.
Re:So what’s next (personal news from developer of popular C... by ufmace on Monday February 13, 2023 @11:21PM (#34785253)
Oooh thanks, I had been looking to find that article again for a while and couldn't track it down for anything.

In a completely unrelated matter, Google search results quality has really declined in the last few years...

Re:So what’s next (personal news from developer of popular C... by modestmc on Tuesday February 14, 2023 @12:37AM (#34785827)
I know far too well how you feel, happy you found what you’ve been missing.

Out of curiosity, what did you remember about the link that you tried searching for? Do you remember when you last saw it?

[insert semicoherent hopium about ChatGPT as a magical panacea here]

Re:So what’s next (personal news from developer of popular C... by ufmace on Tuesday February 14, 2023 @11:11AM (#34791447)
I remembered it as an article where a guy semi-jokingly claimed to have hacked most of the web through a supply-chain exploit and listed off a ton of clever things he did to evade all of the immediately obvious ways to notice that such a thing was happening. Pretty sure I saw it here on HN originally, but I couldn't come up with any search terms to find it in Google, Bing, DDG, HN Angolia search, etc.
Re:So what’s next (personal news from developer of popular C... by modestmc on Tuesday February 14, 2023 @04:28PM (#34796302)
The author said he updated the article, so if the link changed then maybe; however, I can tell you somebody definitely reposted it last night and it got almost 100 points. Too funny.

I assume you tried punching in keywords like “fake NPM package hack” or something like that?

Re:So what’s next (personal news from developer of popular C... by ufmace on Tuesday February 14, 2023 @10:41PM (#34799824)
Pretty much yeah, and no combination I could come up with brought up the article on the first few pages, mostly just infosec blogspam. Of course it might actually show up in searches now, since it's been on the HN front page in the last 24 hours.