you are viewing a single comment's thread
view the rest of the comments
[–] 48 points 4 months ago*

AUR: it happened to me, and one day it will happen to you!

This is still the shai hulud worm.

There’s no reason nixpkgs hasn’t been hacked yet. It jest depends on a few devs credentials being stolen, either by vscode, an npm package, a pypi dep, etc.

  • source