4 ms·
Concealed backdoor in fake AWS files escaped mainstream notice
- marcelnita 2y agoWondering why all those console.log calls ended up in the presumably final version of the exploit. All the more chances for someone to see what they were doing.
- deleted 2y ago[deleted]
- belter 2y agoAnd...it's NPM again....
- lostmsu 2y agoI am not a fan of JS ecosystem, but why do you think this issue is not mostly a function of popularity?
- hfjke 2y ago[dead]
- salawat 2y agoOr... Read code you depend for understanding before you use it. Then once you have something that works; lock it in. Repeat every update. Suddenly backdoor threat will plummet, because every time some bastard violates the principle of least surprise, it sticks out like a sore thumb. Code dependence, much like codependence, is harmful in excess.