News for hackers. Stuff that matters.

A comment on Nx compromised: malware uses Claude code CLI to explore the filesystem. Parent comment

Re:Nx compromised: malware uses Claude code CLI to explore t... by fluoridation on Wednesday August 27, 2025 @06:34PM (#45046170)
Does it really matter, though? Presumably if you're building something is so you can run it. Who cares if the build script is itself going to execute code if the final product that you're going to execute?
[ Parent | on HN ]
Re:Nx compromised: malware uses Claude code CLI to explore t... by johannes1234321 on Wednesday August 27, 2025 @09:59PM (#45047492)
With a scripting language it can matter: If I install some package I can review after the install before running or run in a container or other somewhat protected ground. Whereas anything running during install can hide all trades.

Of course this assumption breaks with native modules and with the sheer amount of code being pulled in indirectly ...

[ Parent | on HN ]