News for hackers. Stuff that matters.
Re:Nx compromised: malware uses Claude code CLI to explore t... by hardwaregeek on Wednesday August 27, 2025 @11:50AM (#45041307)
That’s called the original Go package manager and it was pretty terrible
Re:Nx compromised: malware uses Claude code CLI to explore t... by christophilus on Wednesday August 27, 2025 @02:06PM (#45042959)
I think it was only terrible because the tooling wasn't great. I think it wouldn't be too terribly hard to build a good tool around this approach, though I admittedly have only thought about it for a few minutes.

I may try to put together a proof of concept, actually.

Re:Nx compromised: malware uses Claude code CLI to explore t... by jerf on Wednesday August 27, 2025 @03:01PM (#45043605)
If you're working in Go, you don't need to put together a proof of concept. Very basic project tooling in conjunction with "go mod vendor", which takes care of copying in the dependencies in locally, will do what you're talking about. Go may not default to this operation, but using it this way is fairly easy.