News for hackers. Stuff that matters.
Re:50% of new NPM packages are spam by chatmasta on Thursday March 30, 2023 @08:52AM (#35371864)
Which languages have dependency managers with a public registry that is not indexed in Google? pypi.org and docs.rs are both indexed in Google, for example. With docs.rs it's even kind of annoying because often the indexed page is for an outdated version of the package.

There's really no reason why the same spammer couldn't target those sites too.

There are no comments on this comment yet.