News for hackers. Stuff that matters.

A comment on Axios Compromised on NPM – Malicious Versions Drop Remote Access Trojan. Parent comment

Re:Axios Compromised on NPM – Malicious Versions Drop Remote... by ashishb on Tuesday March 31, 2026 @02:53AM (#47583667)
Run npm/pnpm/bun/uv inside a sandbox.

There is no reason to let random packages have full access to your machine

[ Parent | on HN ]
Re:Axios Compromised on NPM – Malicious Versions Drop Remote... by bbkane on Tuesday March 31, 2026 @08:27AM (#47586333)
Sandboxing by to default world be really nice. One of the things I really appreciate about Claude Code is its permissions model
[ Parent | on HN ]