Nx compromised: malware uses Claude code CLI to explore the filesystem

Re:Nx compromised: malware uses Claude code CLI to explore t... by crabmusket on Wednesday August 27, 2025 @10:48AM (#45040490)

I'd recommend pnpm over npm for monorepos. Forcing you to be explicit about each package's dependencies is good.

I found npm's workspace features lacking in comparison and sparsely documented. It was also hard to find advice on the internet. I got the sense nobody was using npm workspaces for anything other than beginner articles.

[ Parent | on HN ]

Re:Nx compromised: malware uses Claude code CLI to explore t... by threetonesun on Wednesday August 27, 2025 @11:08AM (#45040777)

In the context of what we're talking about here, using the default package manger to install a different package manger as a dependency has never quite sat right with me.

And npm workspaces is certainly "lacking features" compared to NX, but in terms of making `npm link` for local packages easier and running scripts across packages it does fine.

[ Parent | on HN ]

Re:Nx compromised: malware uses Claude code CLI to explore t... by crabmusket on Thursday August 28, 2025 @08:17AM (#45051248)

Yes, I've found the experience of getting pnpm quite irritating/confusing. Corepack doesn't seem to work the way I would want it to, either.

[ Parent | on HN ]

Re:Nx compromised: malware uses Claude code CLI to explore t... by dboreham on Wednesday August 27, 2025 @10:59AM (#45040634)

After 10 years or so enduring the endless cycle of "new thing to replace npm", I'm using: npm. And I'm not creating monorepos.

[ Parent | on HN ]

Re:Nx compromised: malware uses Claude code CLI to explore t... by crabmusket on Thursday August 28, 2025 @08:18AM (#45051259)

I was happily using npm until I outgrew it. pnpm seemed the smallest step towards what I needed after having evaluated nx, moonrepo etc.

[ Parent | on HN ]