Post Mortem: axios NPM supply chain compromise

Re:Post Mortem: axios NPM supply chain compromise by altmanaltman on Friday April 03, 2026 @01:56AM (#47623591)

You can write code in Chinese and Farsi?

[ Parent | on HN ]

Re:Post Mortem: axios NPM supply chain compromise by axitanull on Friday April 03, 2026 @02:03AM (#47623634)

You can deliberately put comments and descriptions using those language.

[ Parent | on HN ]

Re:Post Mortem: axios NPM supply chain compromise by simulator5g on Saturday April 04, 2026 @12:52PM (#47640803)

Yes and there have been documented cases of translated malware. Sometimes its done a little sloppily and there is other evidence that points to the origin being in another country that doesn't speak the language its written in. But even then, you can't really prove they didn't just use a residential VPN or whatever.

[ Parent | on HN ]