News for hackers. Stuff that matters.
Re:Postmortem: TanStack npm supply-chain compromise by throwaway7356 on Tuesday May 12, 2026 @04:52AM (#48105823)
Yeah, works well:

$ /usr/bin/sudo() { echo Not the real sudo.; }

$ /usr/bin/sudo

Not the real sudo.

And every other suggestion also doesn't work if the attacker can just replace the shell.

Re:Postmortem: TanStack npm supply-chain compromise by anthk on Tuesday May 12, 2026 @06:37AM (#48106368)
/usr/bin/sudo isn't evaluated as a function under ksh.
Re:Postmortem: TanStack npm supply-chain compromise by nightpool on Tuesday May 12, 2026 @10:16AM (#48108648)
> And every other suggestion also doesn't work if the attacker can just replace the shell.
Re:Postmortem: TanStack npm supply-chain compromise by anthk on Tuesday May 12, 2026 @06:43PM (#48115571)
With what? rc? My only shells are sh, ksh and rc there.