Re:Self Propagating NPM Malware Compromises over 40 Packages
by cyberax on Tuesday September 16, 2025 @04:05PM
(#45267273)
Go uses the hash of the source code, not the commit ID. So there's no difference between vendoring and using the central repo.
[ Parent
| on HN ]
There are no comments on this comment yet.