5 ms·
Maintainers of popular, trusted projects can get compromised. Hackers steal their publishing tokens and then publish a new, malicious version.
by Hackbraten 5y ago
Maintainers of popular, trusted projects can get compromised. Hackers steal their publishing tokens and then publish a new, malicious version.
- hedora 5y agoWhen did this last happen with Debian or Ubuntu? (which actively vet contributors, at least compared to pip and npm)
- hanniabu 5y agoThat's why I never update anything taps brain
- eternityforest 5y agoIt's not perfect, but it's still pretty good. Plus, if you update manually every few days and read tech news all the time, most malware will probably be discovered before you get it.