News for hackers. Stuff that matters.
Re:Postmortem: TanStack npm supply-chain compromise by GCUMstlyHarmls on Monday May 11, 2026 @11:34PM (#48103909)
I dont mean to be snarky, can you run `pacman -Syu` without root with "new" tech? Or do you mean in general on production systems or whatever?
Re:Postmortem: TanStack npm supply-chain compromise by lrvick on Tuesday May 12, 2026 @04:47AM (#48105789)
Plenty of package managers can install to an arbitrary directory like ~/.local. Each user, or even each project, can have its own rootfs full of software.

The only things I tend to have running at the system level are a kernel and init and maybe openssh.