News for hackers. Stuff that matters.

A comment on Axios Compromised on NPM – Malicious Versions Drop Remote Access Trojan. Parent comment

Re:Axios Compromised on NPM – Malicious Versions Drop Remote... by skydhash on Tuesday March 31, 2026 @03:43PM (#47592421)
Like is-even or leftpad?
[ Parent | on HN ]
Re:Axios Compromised on NPM – Malicious Versions Drop Remote... by habinero on Tuesday March 31, 2026 @04:58PM (#47593397)
Like requests and pytest and ruff and so on, yes.

Rewriting the world to protect against a specific kind of threat is insane.

[ Parent | on HN ]
Re:Axios Compromised on NPM – Malicious Versions Drop Remote... by skydhash on Tuesday March 31, 2026 @09:18PM (#47595619)
It's not there isn't good libraries everywhere. It just the practice around NPM that people are appalled with. It's all about lowering the barrier for developers, even in spite of security and quality.
[ Parent | on HN ]