4 ms·
Is it really a supply chain attack? Were any modules taken control of
by sodality2 5y ago
Is it really a supply chain attack? Were any modules taken control of
- TAForObvReasons 5y agoIn 2022 it's a "supply chain attack" if it disrupts downstream users. The faker.js / colors.js changes were also see as a supply chain attack even though the maintainer knowingly made the changes.
- eyelidlessness 5y agoEvery package that installs this as a subdependency, unless they specifically override the default behavior. That’s assuming you don’t consider hooks (automatically run by default) of direct dependencies valid.
- eddyg 5y agoThings like Unity Hub were affected, and required a “hot fix” release as one high-profile example: https://unity3d.com/hub/whats-new https://unity3d.com/hub/whats-new