News for hackers. Stuff that matters.
Re:Self Propagating NPM Malware Compromises over 40 Packages by cyberax on Tuesday September 16, 2025 @04:05PM (#45267273)
Go uses the hash of the source code, not the commit ID. So there's no difference between vendoring and using the central repo.

There are no comments on this comment yet.