Re:Postmortem: TanStack npm supply-chain compromise
by GCUMstlyHarmls on Monday May 11, 2026 @11:34PM
(#48103909)
I dont mean to be snarky, can you run `pacman -Syu` without root with "new" tech? Or do you mean in general on production systems or whatever?
[ Parent
| on HN ]
Re:Postmortem: TanStack npm supply-chain compromise
by lrvick on Tuesday May 12, 2026 @04:47AM
(#48105789)
Plenty of package managers can install to an arbitrary directory like ~/.local. Each user, or even each project, can have its own rootfs full of software.
The only things I tend to have running at the system level are a kernel and init and maybe openssh.