News for hackers. Stuff that matters.

A comment on Npm install could be dangerous.

Re:Npm install could be dangerous by detaro on Monday January 26, 2015 @10:53AM (#8947608)
Somehow I feel like using something that just simulates rm -rf /* would have brought the point across just as well and a bit safer...
[ Parent | on HN ]
Re:Npm install could be dangerous by txangel on Monday January 26, 2015 @10:58AM (#8947646)
But not as fun
[ Parent | on HN ]
Re:Npm install could be dangerous by jscheel on Monday January 26, 2015 @12:47PM (#8948349)
Agreed, this is irresponsible.
[ Parent | on HN ]
Re:Npm install could be dangerous by yourad_io on Monday January 26, 2015 @01:02PM (#8948457)
There's warnings even in the description of the package:

    "name": "rimrafall",
    "version": "1.0.0",
    "description": "rm -rf /* # DO NOT INSTALL THIS",
How would you accidentally rm rf yourself with this?

A github issue "should" have sufficed, but it often doesn't. A practical demonstration is powerful enough to trigger immediate action.

[ Parent | on HN ]