News for hackers. Stuff that matters.

A comment on Someone Bought 30 WordPress Plugins and Planted a Backdoor in All of Them. Parent comment

Re:Someone Bought 30 WordPress Plugins and Planted a Backdoo... by petcat on Tuesday April 14, 2026 @08:00AM (#47764475)
> Compared to traditional C or C++ projects it's madness.

Those projects typically rely on an external package manager to handle their dependencies for them. Apt, yum, etc. Otherwise you end up in dependency hell trying to get ./configure to find the development headers of whatever it needs. I don't miss those days. Rust/Cargo is a godsend.

[ Parent | on HN ]
Re:Someone Bought 30 WordPress Plugins and Planted a Backdoo... by MarsIronPI on Tuesday April 14, 2026 @08:02AM (#47764497)
It may be better from a DX perspective, but it's pure pain for distros like Debian who don't want to use cargo at build time to fetch arbitrary dependencies and instead use vetted system versions.
[ Parent | on HN ]