News for hackers. Stuff that matters.

A comment on Active NPM supply chain attack: Tinycolor and 40 Packages Compromised. Parent comment

Re:Active NPM supply chain attack: Tinycolor and 40 Packages... by lrvick on Tuesday September 16, 2025 @09:41PM (#45270574)
I full source bootstrapped a Linux distro from hex0 all the way to nodejs binaries just to deal with trusting trust risks.

"just give up" is not a valid strategy.

https://codeberg.org/stagex/stagex

[ Parent | on HN ]
Re:Active NPM supply chain attack: Tinycolor and 40 Packages... by efortis on Tuesday September 16, 2025 @11:24PM (#45271271)
where can I follow you? blog, x?
[ Parent | on HN ]
Re:Active NPM supply chain attack: Tinycolor and 40 Packages... by lrvick on Wednesday September 17, 2025 @01:45PM (#45279005)
https://lance.dev has my mastodon etc. My friends and I also run the #! community, https://hashbang.sh #!:matrix.org
[ Parent | on HN ]