News for hackers. Stuff that matters.

A comment on Snyk security researcher deploys malicious NPM packages targeting Cursor.com. Parent comment

Re:Snyk security researcher deploys malicious NPM packages t... by bangaladore on Wednesday January 15, 2025 @10:24AM (#42711908)
Frankly I wouldn't be surprised if this was a case of Hanlon's razor. Some "researcher" thought well ENV vars will certainly show us what we want and that's where the conversation ended without thinking a little harder into what else might be in the vars.
[ Parent | on HN ]
Re:Snyk security researcher deploys malicious NPM packages t... by neonerosion on Thursday January 16, 2025 @11:34AM (#42727524)
That's not really plausible in the modern legislative environment (pun intended), considering your env vars will contain GDPR-controlled data like your username, at the very least. Combined with the IP address it was collected from, they know who you are and where you live.
[ Parent | on HN ]