3 ms·
It’s foolish to feel safe because your package management solution hasn’t been attacked yet. The attack vector is generalized.
by bitmasher9 3mo ago
It’s foolish to feel safe because your package management solution hasn’t been attacked yet.
The attack vector is generalized.
- yearolinuxdsktp 3mo agoIt’s rational to feel much safer in the Java packages ecosystem, where pinned versions are the default and the norm, and packages cannot run any install-time scripts.