News for hackers. Stuff that matters.

A comment on Over 100k Infected Repos Found on GitHub. Parent comment

Re:Over 100k Infected Repos Found on GitHub by richbell on Thursday February 29, 2024 @11:44AM (#39551776)
> `go get` is the only common dependency downloader I am currently aware of where hostile code doesn't run at install or build time.

Maven is the same way, AFAIK.

[ Parent | on HN ]

There are no comments on this comment yet.