Re:Self Propagating NPM Malware Compromises over 40 Packages
by acomjean on Tuesday September 16, 2025 @12:53PM
(#45264766)
I’m using windows again. By default windows has “power shell” which is not at all like bash and is (how do I say this diplomatically)… wanting.
I mean it says something the developed the Linux Subsystem for Windows, but it’s an optional install.
Re:Self Propagating NPM Malware Compromises over 40 Packages
by jahsome on Tuesday September 16, 2025 @02:26PM
(#45265934)
What dont you like about powershell?
I'm a die hard linux user, and some years ago took a windows gig on a whim. I find powershell fantastic and the only thing that makes my role bearable. Now, one of the first things i install on Linux is powershell.
Re:Self Propagating NPM Malware Compromises over 40 Packages
by philipwhiuk on Tuesday September 16, 2025 @04:49PM
(#45267838)
The awk equivalents in power-shell are horrific.
Re:Self Propagating NPM Malware Compromises over 40 Packages
by jahsome on Wednesday September 17, 2025 @12:40AM
(#45271737)
You don't find awk itself horrific in its own way?
Re:Self Propagating NPM Malware Compromises over 40 Packages
by stockresearcher on Tuesday September 16, 2025 @03:30PM
(#45266823)
I watched an interview with Jeff Snover once and he said that they tried to make a unixy bash-like shell a few times and decided it was never going to fit in Windows. So they went a different way and took a lot of inspiration from OpenVMS.
So don’t expect PowerShell to be like a UNIX shell. It isn’t, and wasn’t meant to be one. It’s different, on purpose :)
> The entire attack design assumes Linux or macOS execution environments, checking for os.platform() === 'linux' || 'darwin'. It deliberately skips Windows systems
If I were the conspiracy-minded sort I might jump to some wild conclusions here.