sanitation@lemmy.today to Golang@programming.dev · 27 days agoHijacked npm and Go Packages Use VS Code Tasks to Deploy Python Infostealerthehackernews.comexternal-linkmessage-square1linkfedilinkarrow-up17arrow-down11
arrow-up16arrow-down1external-linkHijacked npm and Go Packages Use VS Code Tasks to Deploy Python Infostealerthehackernews.comsanitation@lemmy.today to Golang@programming.dev · 27 days agomessage-square1linkfedilink
minus-squareKairos@lemmy.todaylinkfedilinkarrow-up1·26 days ago“Installing software installs software”-ass vulnerability. At least Go protects you by including checksums and hard versions of imported packages. NPM doesn’t.
“Installing software installs software”-ass vulnerability. At least Go protects you by including checksums and hard versions of imported packages. NPM doesn’t.