Conversation

Notices

1. Embed this notice
   Baldur Bjarnason (baldur@toot.cafe)'s status on Wednesday, 23-Jul-2025 00:22:14 JST Baldur Bjarnason

   “Maintainers of ESLint Prettier Plugin Attacked via npm Supply Chain Malware | Snyk”

   https://snyk.io/blog/maintainers-of-eslint-prettier-plugin-attacked-via-npm-supply-chain-malware/

   Feels like there's something fundamentally broken about npm. That we've put all of the web dev and node eggs in a single basket is definitely a bad idea as well

   • Embed this notice
     Rich Felker (dalias@hachyderm.io)'s status on Wednesday, 23-Jul-2025 00:22:13 JST Rich Felker

     in reply to

     @baldur LPMs were a mistake but nobody listens.

   • Embed this notice
     Rich Felker (dalias@hachyderm.io)'s status on Wednesday, 23-Jul-2025 00:31:12 JST Rich Felker

     in reply to

     @baldur Classic "growth hacking over sustainability" capitalist brainworms.