HN Explorer

5 comments

[ 0.23 ms ] story [ 22.0 ms ] thread
arresin
It’s weird how an npm package can just do all this still, to this day.
Bridged7756
Given the size of the JavaScript ecosystem, it is indeed baffling how behind npm is. One npm i and a typo away from getting hacked.
owebmaster
I "got" hacked by a North Korean hacker. I was lucky the dumb virus was meant for Mac and Windows, not Linux. It got installed to my computer but attempted to steal credentials in places there did not exist in my computer, but it was a close call.

After that I never used npm again.

cyanydeez
North korea and others are likely going if not already, setup an uno reverso and get applicants to do screening tests that require downloading malicious packages.
leggomuhgreggo
It must be "sanctions renewal" season!

The vipers in the big nest need a bunch of trash cyber security media to premise renewal of sanctions against DPRK.

Bless our patriotic vipers, and their white hat hackers/influencers.