NPM packages from Red Hat have been compromised

Re:NPM packages from Red Hat have been compromised by hedora on Monday June 01, 2026 @12:22PM (#48358960)

This is way too little, way too late.

To see what I mean, try actually packaging a cross-platform binary dependency in their ecosystem.

[ Parent | on HN ]

Re:NPM packages from Red Hat have been compromised by bakkoting on Monday June 01, 2026 @12:30PM (#48359080)

I have; you specify one optional dependency per platform and set the requirements in each package. It works fine. A bunch of packages do this (e.g. esbuild). I don't know what your complaint is or what you're asking for.

[ Parent | on HN ]