Fake VS Code Extension on NPM Spreads Multi-Stage Malware

Re:Fake VS Code Extension on NPM Spreads Multi-Stage Malware by nailer on Monday February 10, 2025 @03:55PM (#43005043)

JS/TS having code reusability isn't a problem. Other ecosystems don't have the same problems not because they have package repos just as good as npm but write everything from scratch out of virtue, but because they don't have package repos just as good as npm.

[ Parent | on HN ]

Re:Fake VS Code Extension on NPM Spreads Multi-Stage Malware by sigzero on Monday February 10, 2025 @03:59PM (#43005082)

> because they don't have package repos just as good as npm

What? That simply is not true unless you mean "good" as in "good in spreading malware". lol

[ Parent | on HN ]

Re:Fake VS Code Extension on NPM Spreads Multi-Stage Malware by paulddraper on Monday February 10, 2025 @06:07PM (#43006463)

"Easy to use" being more descriptive.

Which is a help for spreading both good code and malware.

[ Parent | on HN ]

Re:Fake VS Code Extension on NPM Spreads Multi-Stage Malware by bolognafairy on Monday February 10, 2025 @06:14PM (#43006515)

I’d be curious to hear what you think that PyPI et al are doing that NPM should be copying. It sounds like you’re pretty knowledgeable in this area, to be comfortable making comments like this with such confidence.

[ Parent | on HN ]

Re:Fake VS Code Extension on NPM Spreads Multi-Stage Malware by nailer on Tuesday February 11, 2025 @01:47AM (#43009742)

I would respond, but you have not provided any supporting arguments.

[ Parent | on HN ]