Karna@lemmy.ml to Linux@lemmy.ml · 7 hours agoArch Linux AUR Under Another Wave Of Malicious Packages, Package Adoptions Haltedwww.phoronix.comexternal-linkmessage-square28fedilinkarrow-up184arrow-down10
arrow-up184arrow-down1external-linkArch Linux AUR Under Another Wave Of Malicious Packages, Package Adoptions Haltedwww.phoronix.comKarna@lemmy.ml to Linux@lemmy.ml · 7 hours agomessage-square28fedilink
minus-squarechgxvjh [he/him, comrade/them]@hexbear.netlinkfedilinkEnglisharrow-up2·6 hours agoNpm doesn’t let you easily take over packages you don’t own.
minus-squareCysio@lemmygrad.mllinkfedilinkarrow-up1·edit-24 hours agobut does let you take over their maintainers’ accounts (through poor security) and easily poison them
minus-squarechgxvjh [he/him, comrade/them]@hexbear.netlinkfedilinkEnglisharrow-up1·4 hours agoNot more easily than anything else.
Npm doesn’t let you easily take over packages you don’t own.
but does let you take over their maintainers’ accounts (through poor security) and easily poison them
Not more easily than anything else.