News for hackers. Stuff that matters.

A comment on Npm install could be dangerous. Parent comment

Re:Npm install could be dangerous by jscheel on Monday January 26, 2015 @12:47PM (#8948349)
Agreed, this is irresponsible.
[ Parent | on HN ]
Re:Npm install could be dangerous by yourad_io on Monday January 26, 2015 @01:02PM (#8948457)
There's warnings even in the description of the package:

    "name": "rimrafall",
    "version": "1.0.0",
    "description": "rm -rf /* # DO NOT INSTALL THIS",
How would you accidentally rm rf yourself with this?

A github issue "should" have sufficed, but it often doesn't. A practical demonstration is powerful enough to trigger immediate action.

[ Parent | on HN ]