Re:Shai-Hulud Returns: Over 300 NPM Packages Infected
by littlecranky67 on Monday November 24, 2025 @09:05AM
(#46034243)
Professionally I am a fulltime FE Dev using Typescript+React. My Backends for my side projects are all done in C#, even so I'd be fluent in node+typescript for that very reason. In a current side project, my backend only has 3 external package dependencies, 2 of which are SQLite+ORM related. The frontend for that sideproject has over 50 (React/Typescript/MaterialUI/NextJS/NX etc.)
[ Parent
| on HN ]
Re:Shai-Hulud Returns: Over 300 NPM Packages Infected
by noveltyaccount on Monday November 24, 2025 @09:24AM
(#46034452)
.NET being so batteries-included is one of its best features. And when vulnerabilities do creep in, it's nice to know that Microsoft will fix it rather than hoping a random open source project will.