Y
HN Search
Hacker News Search
new
|
comments
|
top
|
jobs
flpa
searching PlanetScale…
1.
▲
2.
▲
3.
▲
4.
▲
5.
▲
6.
▲
3 ms
·
1.
▲
by
flpa
5y ago
The exploit isn't a general risk of package management, but a weakness in scripted pull request handling. GitHub is the problem, and not for the first time (remember the Homakov exploit?). Homebrew is quite similar to FreeBSD ports, wh