News for hackers. Stuff that matters.
Re:Self Propagating NPM Malware Compromises over 40 Packages by shermantanktop on Tuesday September 16, 2025 @10:43AM (#45262967)
“code I picked up off the side of the road”

“code I somehow took a dependency on when copying bits of someone’s package.json file”

“code which showed up in my lock file and I still don’t know how it got there”

Re:Self Propagating NPM Malware Compromises over 40 Packages by orbital-decay on Tuesday September 16, 2025 @10:48AM (#45263069)
All of which is true for far too many projects