4 ms·

Python is just far more popular. RubyGem: https://www.bleepingcomputer.com/news/security/malicious-rubygems-packages-used-in-cryptocurrency-supply-chain-attack

• d4mi3n 4y ago
  I think this has more to due with the contexts/industries we typically see Python used in over pure popularity. If popularity was the only factor I'd expect to seeing a lot more news about these problems in Java/PHP ecosystems which are absolutely massive.
  • mcdonje 4y ago
    I mean, PHP is pretty much a domain specific language, and we're only about a year out from log4j.
    • rrwo 4y ago
      Log4 wasn't malicious.
      • intelVISA 4y ago
        ;)
  • marcinzm 4y ago
    Java is special since it has mandatory version pinning of all dependencies, doesn't run code at install time and uses a full url for dependency names. That means dependencies don't auto-update, don't compromise CI/CD as easily and don't get misspelled as easily (ie: people copy paste the whole name+version versus writing it from memory). Many languages since then decided that causes too much overhead.