News for hackers. Stuff that matters.

A comment on Self Propagating NPM Malware Compromises over 40 Packages. Parent comment

Re:Self Propagating NPM Malware Compromises over 40 Packages by knert on Tuesday September 16, 2025 @01:09PM (#45264977)
1000% agree. Javascript is weak in this regard if you compare it to major programming languages. It just adds unnecessary security risks not having a language with built in imports for common things like making API calls out or parsing JSON, for example.
[ Parent | on HN ]
Re:Self Propagating NPM Malware Compromises over 40 Packages by anon7000 on Tuesday September 16, 2025 @05:14PM (#45268156)
It does have functions for that, “fetch” and “JSON.parse,” available in most JS runtimes.
[ Parent | on HN ]