Re:Self Propagating NPM Malware Compromises over 40 Packages
by int_19h on Tuesday September 16, 2025 @11:10AM
(#45263387)
What C doesn't have is an agreed-upon standard package manager. Which means that any dependency - including transitive ones! - requires some effort on behalf of the developer to add to the build. And that, in turn, puts pressure on library authors to avoid dependencies other than a few well-established libraries (like libpng or GLib),
[ Parent
| on HN ]
There are no comments on this comment yet.