News for hackers. Stuff that matters.

A comment on Snyk security researcher deploys malicious NPM packages targeting Cursor.com. Parent comment

Re:Snyk security researcher deploys malicious NPM packages t... by nomilk on Monday January 13, 2025 @10:30PM (#42693218)
> If that's the case, then there's not much to see here.

Allowing someone full access to the contents of your environment (i.e. output of env command) is a big deal to most, I suspect.

[ Parent | on HN ]
Re:Snyk security researcher deploys malicious NPM packages t... by LtWorf on Tuesday January 14, 2025 @11:49AM (#42699836)
If /proc is mounted you can read all of that.
[ Parent | on HN ]