3 ms·
Electron has nothing to do with the exploit here. A Vim plugin would have just as much ability to run malware.
by Gigachad 6mo ago
Electron has nothing to do with the exploit here. A Vim plugin would have just as much ability to run malware.
- skydhash 6mo agoNo one using vim will install the kind of extensions I found on the usual VS Code setup. And most don't even autoupdates.
- Gigachad 6mo agoI’m not sure this is true. Vim needs extensions even more than VS code since many basic features like full project code search or go to definition aren’t in the base vim. And vim has package managers that make installing and updating packages as easy as vs code. VS Code like npm are only the targets because they are the most popular, not because they are uniquely vulnerable.
- tliltocatl 6mo ago> full project code search grep > go to definition /definition Not even using vim, I'm more of a micro person.