News for hackers. Stuff that matters.

A comment on NPM packages from Red Hat have been compromised. Parent comment

Re:NPM packages from Red Hat have been compromised by semiquaver on Monday June 01, 2026 @10:11AM (#48357083)
> they've taken no action.

Not running lifecycle scripts by default is eventually going to be the default behavior. Late is worse (edit: I meant better) than not at all. https://github.com/npm/rfcs/pull/868

[ Parent | on HN ]
Re:NPM packages from Red Hat have been compromised by brookst on Monday June 01, 2026 @10:14AM (#48357121)
Wait how is being late worse than not doing it at all? Is it true for mortgage payments and apologies?
[ Parent | on HN ]