News for hackers. Stuff that matters.
Re:NPM packages from Red Hat have been compromised by stingraycharles on Monday June 01, 2026 @10:25AM (#48357275)
How many package managers allow executing arbitrary code as part of the installation process by default?
Re:NPM packages from Red Hat have been compromised by icedchai on Monday June 01, 2026 @12:06PM (#48358723)
Almost all of them.
Re:NPM packages from Red Hat have been compromised by stingraycharles on Monday June 01, 2026 @07:06PM (#48363762)
I haven’t seen this in Go or Java?
Re:NPM packages from Red Hat have been compromised by icedchai on Tuesday June 02, 2026 @11:19AM (#48371428)
Ok, so you are right, Go and Java (Maven, at least) doesn't have this issue.