Re:Nx compromised: malware uses Claude code CLI to explore t...
by lxgr on Wednesday August 27, 2025 @01:55PM
(#45042815)
There's obviously a tradeoff there.
At some level of complexity it probably makes sense to import (and pin to a specific version by hash) a dependency, but at least in the JavaScript ecosystem, that level seems to be "one expression of three tokens" (https://www.npmjs.com/package/is-even).
At some level of complexity it probably makes sense to import (and pin to a specific version by hash) a dependency, but at least in the JavaScript ecosystem, that level seems to be "one expression of three tokens" (https://www.npmjs.com/package/is-even).