3 ms·
LMAO the supply chain attack potential is epic. Oopsie the author of leftpad clicked the wrong button and now an unknown entity owns their package and just upd
by qbasic_forever 4y ago
LMAO the supply chain attack potential is epic. Oopsie the author of leftpad clicked the wrong button and now an unknown entity owns their package and just updated it with malicious content!
- beckingz 4y agoRegular phishing. Oopsie!
- hailwren 4y agoHow is this different from our current signing key system?
- qbasic_forever 4y agoMy signing keys aren't tied to obscure 'smart contracts' that execute code when I do things like try to delete them.
- cuteboy19 4y agoIf you are pwned you can contact pypi and get it fixed