News for hackers. Stuff that matters.
Re:Maybe you shouldn't install new software for a bit by Izkata on Friday May 08, 2026 @06:57PM (#48069782)
Python's pip predates npm, installs dependencies automatically, can include binaries, and the old-style packages could run arbitrary code during the install.

Ruby gems are older than that, but I have no idea what capabilities it has/had.

There are no comments on this comment yet.