News for hackers. Stuff that matters.

A comment on NPM packages from Red Hat have been compromised. Parent comment

Re:NPM packages from Red Hat have been compromised by iwhalen on Monday June 01, 2026 @09:45AM (#48356805)
uv supports the same for any Python developers out there: https://docs.astral.sh/uv/concepts/resolution/#dependency-co...
[ Parent | on HN ]
Re:NPM packages from Red Hat have been compromised by no-name-here on Monday June 01, 2026 @11:05AM (#48357819)
Sadly I haven't seen that Visual Studio/Rider/dotnet/Vs Code have such a feature for the c#/dotnet ecosystem.
[ Parent | on HN ]
Re:NPM packages from Red Hat have been compromised by orphea on Monday June 01, 2026 @11:35AM (#48358260)
Yep, a bummer. The devs don't even consider it a priority, too busy designing the feature:

https://github.com/NuGet/Home/issues/14657#issuecomment-3573...

[ Parent | on HN ]
Re:NPM packages from Red Hat have been compromised by KORraN on Monday June 01, 2026 @10:07AM (#48357050)
pip has recently added a similar option, i.e.

`pip install --uploaded-prior-to P7D pre-commit`

https://pip.pypa.io/en/stable/cli/pip_install/#cmdoption-upl...

[ Parent | on HN ]
Re:NPM packages from Red Hat have been compromised by darth_avocado on Monday June 01, 2026 @09:50AM (#48356846)
And somehow poetry doesn’t in 2026.
[ Parent | on HN ]
Re:NPM packages from Red Hat have been compromised by armanckeser on Monday June 01, 2026 @10:31AM (#48357363)
I don't use poetry anymore but do check the updates before claiming such things

https://python-poetry.org/blog/announcing-poetry-2.4.0/

[ Parent | on HN ]
Re:NPM packages from Red Hat have been compromised by genxy on Monday June 01, 2026 @11:04AM (#48357795)
May 3rd 2026. Release too new, didn't read.
[ Parent | on HN ]
Re:NPM packages from Red Hat have been compromised by darth_avocado on Monday June 01, 2026 @01:22PM (#48359847)
Fair, I didn’t do a “as of this morning check”. Should’ve done better. It’s sad because I moved away exactly because this feature was missing and now I’m not going back.
[ Parent | on HN ]
Re:NPM packages from Red Hat have been compromised by dist-epoch on Monday June 01, 2026 @10:26AM (#48357288)
so? nobody uses it anymore
[ Parent | on HN ]