Re:Postmortem: TanStack npm supply-chain compromise
by marshray on Tuesday May 12, 2026 @06:54PM
(#48115659)
Shell-only, but
https://pubs.opengroup.org/onlinepubs/9699919799/utilities/V...
[ Parent
| on HN ]
Re:Postmortem: TanStack npm supply-chain compromise
by anthk on Wednesday May 13, 2026 @03:32AM
(#48118897)
Yes; I'm aware, but for some environments writting a custom shell as the one for SDF would be an easier task. Or maybe a really restricted "ash" called "rash" -because it is- with maybe autocomplete and that's it. Hardcoded $PATH and the like.