News for hackers. Stuff that matters.

A comment on Self Propagating NPM Malware Compromises over 40 Packages. Parent comment

Re:Self Propagating NPM Malware Compromises over 40 Packages by spoiler on Wednesday September 17, 2025 @06:58AM (#45274201)
The reason he went down this rabbit hole was because he was chronically running low on disk space, and his target dir was one of the largest contributors.

Not sure how he actually got the number; this was just a frustrated Slack message like 4 years ago

A sibling comment mentions we could have been using Cargo workspaces wrong... So, maybe?

[ Parent | on HN ]
Re:Self Propagating NPM Malware Compromises over 40 Packages by burntsushi on Wednesday September 17, 2025 @08:39AM (#45275133)
He probably just needed to run `cargo clean` occasionally.

But you definitely aren't finding hundreds of versions of `regex` in the same dependency tree.

[ Parent | on HN ]