News for hackers. Stuff that matters.

A comment on Nx compromised: malware uses Claude code CLI to explore the filesystem. Parent comment

Re:Nx compromised: malware uses Claude code CLI to explore t... by kbrkbr on Wednesday August 27, 2025 @12:24PM (#45041745)
But here's the catch. If you do that in a lot of places, you'll have a lot of extra code to manage.

So your suggested approach does not seem to scale well.

[ Parent | on HN ]
Re:Nx compromised: malware uses Claude code CLI to explore t... by lxgr on Wednesday August 27, 2025 @01:55PM (#45042815)
There's obviously a tradeoff there.

At some level of complexity it probably makes sense to import (and pin to a specific version by hash) a dependency, but at least in the JavaScript ecosystem, that level seems to be "one expression of three tokens" (https://www.npmjs.com/package/is-even).

[ Parent | on HN ]