4 ms·
How did you know? Now I’m worried I’ve been hacked a billion times testing npm packages just today.
by braebo 1y ago
How did you know? Now I’m worried I’ve been hacked a billion times testing npm packages just today.
- owebmaster 1y ago> How did you know? A recruiter profile disappeared from my inbox in linkedin after I sent a PR to a github project for a an interview so I got suspicious and checked if there was any unrecognized open connection usng `lsof -nPi | grep ESTABLISHED` and there was one, found the script, read it to see what it did - tried to steal crypto and browser credentials. To be sure it did not install other stuff I could not find I did a full reinstall of the OS. Now I don't use npm ever again.
- hulitu 1y ago> How did you know? He installed npm, pypy and cargo. /s