News for hackers. Stuff that matters.

A comment on Someone Bought 30 WordPress Plugins and Planted a Backdoor in All of Them. Parent comment

Re:Someone Bought 30 WordPress Plugins and Planted a Backdoo... by joshstrange on Monday April 13, 2026 @04:41PM (#47757536)
> React happily also has 0 dependencies,

Ok, but it has 112 devDependencies, I'm not really sure "0 dependencies" best describes React.

[ Parent | on HN ]
Re:Someone Bought 30 WordPress Plugins and Planted a Backdoo... by K0IN on Monday April 13, 2026 @06:22PM (#47758718)
Dev dependencies are not installed when you install the package into your project.

Also I checked how many deps vuejs has, also 0.

[ Parent | on HN ]
Re:Someone Bought 30 WordPress Plugins and Planted a Backdoo... by hokkos on Monday April 13, 2026 @05:54PM (#47758354)
Those are not installed.
[ Parent | on HN ]