6
Hijacked npm and Go Packages Use VS Code Tasks to Deploy Python Infostealer (thehackernews.com)
submitted 4 months ago by to c/golang@programming.dev
1 comment fedilink hide all child comments
you are viewing a single comment's thread
view the rest of the comments
[–] 1 point 4 months ago

"Installing software installs software"-ass vulnerability. At least Go protects you by including checksums and hard versions of imported packages. NPM doesn't.

  • permalink
  • fedilink
  • source
    •