Nx compromised: malware uses Claude code CLI to explore the filesystem

Re:Nx compromised: malware uses Claude code CLI to explore t... by skydhash on Wednesday August 27, 2025 @09:58AM (#45039803)

The thing is, system based package managers require discipline, especially from library authors. Even in the web world, it’s really distressing when you see a minor library is already on its 15 iteration in less that 5 years.

I was trying to build just (the task runner) on Debian 12 and it was impossible. It kept complaining about rust version, then some libraries shenanigans. It is way easier to build Emacs and ffmpeg.

[ Parent | on HN ]

Re:Nx compromised: malware uses Claude code CLI to explore t... by ajross on Wednesday August 27, 2025 @12:08PM (#45041560)

Indeed, it seems insane that we're pining for the days of autotools, configure scripts and the cleanly inspectable dependency structure.

But... We absolutely are.

[ Parent | on HN ]

Re:Nx compromised: malware uses Claude code CLI to explore t... by kalaksi on Thursday August 28, 2025 @01:30AM (#45048739)

Disagree. And why wouldn't dep structure be cleanly inspectable.

[ Parent | on HN ]

Re:Nx compromised: malware uses Claude code CLI to explore t... by ajross on Friday August 29, 2025 @09:57AM (#45064222)

Decades ago, you'd type "configure" and be told you need to install libfoobar version 9, and you would, and it would work.

Now you get npm whining at you about an unsatisfiable dependency cycle because some three-level-removed transitive dependency you've never heard of put a hard lock file in that reference a version that got pulled for a security flaw.

[ Parent | on HN ]