News for hackers. Stuff that matters.
Re:Postmortem: TanStack npm supply-chain compromise by fabian2k on Monday May 11, 2026 @06:21PM (#48101483)
Once you run your app with the updated dependencies, that code is executed anyway. And root or non-root doesn't matter, the important stuff is available as the user running the application anyway.

There are no comments on this comment yet.