5 ms·
>Maven has this problem What malicious packages have been found on Maven central?
by danjoc 9y ago
>Maven has this problem
What malicious packages have been found on Maven central?
- KirinDave 9y agoWhy don't you google or follow the link I already gave?
- danjoc 9y agoExactly what I thought. You can't name one. Coincidentally, Maven central requires GPG signatures.
- KirinDave 9y agoAs we all know you can only sign a piece of code if it is free of malicious software. Heck, I read that you can't even make a GPG key without proving your virtue to Richard Stallman in festivus-style competition.