News for hackers. Stuff that matters.

A comment on Self Propagating NPM Malware Compromises over 40 Packages. Parent comment

Re:Self Propagating NPM Malware Compromises over 40 Packages by philipwhiuk on Tuesday September 16, 2025 @08:06AM (#45261121)
HTMX is full of JavaScript. Server-side-rendering without JavaScript is just back to the stuff Perl and PHP give you.
[ Parent | on HN ]
Re:Self Propagating NPM Malware Compromises over 40 Packages by bdcravens on Tuesday September 16, 2025 @08:21AM (#45261273)
I don't think the point is to avoid Javascript, but to avoid depending on a random number of third-parties.

> Server-side-rendering without JavaScript is just back to the stuff Perl and PHP give you.

As well as Ruby, Python, Go, etc.

[ Parent | on HN ]
Re:Self Propagating NPM Malware Compromises over 40 Packages by hosh on Tuesday September 16, 2025 @08:48AM (#45261514)
Do you count LiveView (Elixir) in that assessment?
[ Parent | on HN ]
Re:Self Propagating NPM Malware Compromises over 40 Packages by norman784 on Tuesday September 16, 2025 @09:41AM (#45262149)
HTMX does not have external dependencies, only dev dependencies, reducing the attack surface.
[ Parent | on HN ]