Conversation

Notices

1. Embed this notice
   digitalfox (digitalfox@yip.vulpine.engineer)'s status on Wednesday, 27-Nov-2024 08:26:38 JST digitalfox

   in reply to

   • Security Writer :verified: :donor:

   @SecurityWriter I'd joke that we need a package manager manager, but I'm pretty sure multiple of those exist, too (can't remember names off the top of my head).

   • Embed this notice
     Security Writer :verified: :donor: (securitywriter@infosec.exchange)'s status on Wednesday, 27-Nov-2024 08:26:39 JST Security Writer :verified: :donor:

     If I see another FOSS guide that starts with “trust and install this random package manager” I’m going to scream.

     Paul Cantrell and Joachim repeated this.
   • Embed this notice
     Security Writer :verified: :donor: (securitywriter@infosec.exchange)'s status on Friday, 29-Nov-2024 08:30:38 JST Security Writer :verified: :donor:

     in reply to

     You were saying…

     https://thehackernews.com/2024/11/xmlrpc-npm-library-turns-malicious.html