Nx compromised: malware uses Claude code CLI to explore the filesystem

Re:Nx compromised: malware uses Claude code CLI to explore t... by skydhash on Wednesday August 27, 2025 @02:29PM (#45043218)

> It's not reasonable to expect every software in existence to work with a compatible set of dependencies. So no, the distro can't supply all the libraries.

That is not what it's being asked.

As a developer, you just need to provide the code and the list of requirements. And maybe some guide about how to build and run tests. You do not want to care about where I find those dependencies (Maybe I'm running you code as PID 1).

But a lot of developers want to be maintainers as well and they want to enforce what can be installed on the user's system. (And no I don't want docker and multiple versions of nginx)

[ Parent | on HN ]

Re:Nx compromised: malware uses Claude code CLI to explore t... by marcosdumay on Wednesday August 27, 2025 @03:13PM (#45043775)

> That is not what it's being asked.

From whom? You seem to be talking only about upstream developers.

[ Parent | on HN ]

Re:Nx compromised: malware uses Claude code CLI to explore t... by jen20 on Wednesday August 27, 2025 @04:25PM (#45044726)

The question is whose issue tracker ends up on blast when something that Debian did causes issues in software. Often only to find that the bug has been fixed already but the distribution won't bother to update.

[ Parent | on HN ]

Re:Nx compromised: malware uses Claude code CLI to explore t... by rcxdude on Wednesday August 27, 2025 @04:49PM (#45045048)

>As a developer, you just need to provide the code and the list of requirements. And maybe some guide about how to build and run tests. You do not want to care about where I find those dependencies (Maybe I'm running you code as PID 1).

That's provided by any competent build system. If you want to build it differently, with a different set of requirements, that's up to you to figure out (and fix when it breaks).

[ Parent | on HN ]