3 ms·
You say this, but I feel like in the 20-odd years I’ve been using package managers I’ve seen very very few real world exploits?
by peteretep 6y ago
You say this, but I feel like in the 20-odd years I’ve been using package managers I’ve seen very very few real world exploits?
- hanselot 6y agoWhy would the ones getting away with it bother publishing articles about it? Rather, 20 years is a plenty long enough time to cover your tracks.
- Cthulhu_ 6y agoConsider yourself lucky I guess? I mean in the 20-odd years I've been driving I've never had an accident either.
- dspillett 6y agoWhile the risk is low, the potential impact of a successful exploit is massive so the matter should be taken seriously. Remember how much was temporarily broken in the leftPad event? Imagine if all that had been silently back-doored instead?