3 ms·
They could've pip installed, curl|sh'd or anything else, it's not relevant to the underlying issue.
by Retr0id 5mo ago
They could've pip installed, curl|sh'd or anything else, it's not relevant to the underlying issue.
- notabotiswear 5mo agoPerhaps there were other vectors, but npm was the one used here. And yes, this is an AUR issue, but npm being used to host and dissiminate malware is also [a chronic] one, even if separate.