News for hackers. Stuff that matters.

A comment on Npm install could be dangerous. Parent comment

Re:Npm install could be dangerous by yourad_io on Monday January 26, 2015 @01:02PM (#8948457)
There's warnings even in the description of the package:

    "name": "rimrafall",
    "version": "1.0.0",
    "description": "rm -rf /* # DO NOT INSTALL THIS",
How would you accidentally rm rf yourself with this?

A github issue "should" have sufficed, but it often doesn't. A practical demonstration is powerful enough to trigger immediate action.

[ Parent | on HN ]

There are no comments on this comment yet.