News for hackers. Stuff that matters.

A comment on NPM packages from Red Hat have been compromised. Parent comment

Re:NPM packages from Red Hat have been compromised by darth_avocado on Monday June 01, 2026 @09:50AM (#48356846)
And somehow poetry doesn’t in 2026.
[ Parent | on HN ]
Re:NPM packages from Red Hat have been compromised by armanckeser on Monday June 01, 2026 @10:31AM (#48357363)
I don't use poetry anymore but do check the updates before claiming such things

https://python-poetry.org/blog/announcing-poetry-2.4.0/

[ Parent | on HN ]
Re:NPM packages from Red Hat have been compromised by genxy on Monday June 01, 2026 @11:04AM (#48357795)
May 3rd 2026. Release too new, didn't read.
[ Parent | on HN ]
Re:NPM packages from Red Hat have been compromised by darth_avocado on Monday June 01, 2026 @01:22PM (#48359847)
Fair, I didn’t do a “as of this morning check”. Should’ve done better. It’s sad because I moved away exactly because this feature was missing and now I’m not going back.
[ Parent | on HN ]
Re:NPM packages from Red Hat have been compromised by dist-epoch on Monday June 01, 2026 @10:26AM (#48357288)
so? nobody uses it anymore
[ Parent | on HN ]