News for hackers. Stuff that matters.

A comment on Self Propagating NPM Malware Compromises over 40 Packages. Parent comment

Re:Self Propagating NPM Malware Compromises over 40 Packages by gedy on Tuesday September 16, 2025 @01:58PM (#45265570)
It's too bad MS doesn't own npm, and/or GitHub repositories. Wait
[ Parent | on HN ]
Re:Self Propagating NPM Malware Compromises over 40 Packages by LikesPwsh on Tuesday September 16, 2025 @03:47PM (#45267047)
Nuget, Powershell gallery, the marketplaces for VSCode/VS/AZDo and the Microsoft Store too. Probably another twenty.

They collect package managers like funko pops.

I'm not quite sure about the goal. Maybe some more C# dev kit style rug-pulls where the ecosystem is nominally open-source but MS own the development and distribution so nobody would bother to compete.

[ Parent | on HN ]
Re:Self Propagating NPM Malware Compromises over 40 Packages by lovich on Tuesday September 16, 2025 @04:57PM (#45267955)
I took those acquisitions and a few others like LinkedIn and all the visual studio versions as a sign that Microsoft is trying to own the software engineer career as a domain.
[ Parent | on HN ]