Re:Postmortem: TanStack npm supply-chain compromise
by lrvick on Tuesday May 12, 2026 @04:47AM
(#48105789)
Plenty of package managers can install to an arbitrary directory like ~/.local. Each user, or even each project, can have its own rootfs full of software.
The only things I tend to have running at the system level are a kernel and init and maybe openssh.
The only things I tend to have running at the system level are a kernel and init and maybe openssh.