3 ms·
What‘s the advice? Only develop in a sandbox environment? Otherwise chances are our main machines get compromised?
by submeta 2y ago
What‘s the advice? Only develop in a sandbox environment? Otherwise chances are our main machines get compromised?
- rcxdude 2y agoVet your dependencies, at least to the level of making sure your direct ones are actually real projects done by known people and reasonably widely used. Note that for all the buzz about these kinds of attacks, there's relatively little evidence they are actually successful at being downloaded and installed by anything but automated scanning/archiving systems.