Comment on Shai-Hulud Returns: Over 300 NPM Packages Infected

• frongt@lemmy.zip ⁨3⁩ ⁨weeks⁩ ago

  It happens in python pip too.

  source

  • Eldritch@piefed.world ⁨3⁩ ⁨weeks⁩ ago

    Arch checking in. It may happen less. But it still does.

    source

    • orclev@lemmy.world ⁨3⁩ ⁨weeks⁩ ago

      To be fair to Arch, the AUR was always advertised as a caveat emptor type thing. It never really claimed to be secure in the first place.

      source

      • Eldritch@piefed.world ⁨3⁩ ⁨weeks⁩ ago

        That is fair.

        source
• nyan@lemmy.cafe ⁨3⁩ ⁨weeks⁩ ago

  Python and Ruby have both had various repo issues too.

  I’ve never heard of anything similar with Perl, but that may partly be because applications for new developers who want to join CPAN still appear to be processed by humans, with up to a couple of weeks lag. The time inefficiency plus the language being less popular probably makes it an unattractive target.

  source