▲ 79 ▼ Sonatype Uncovers Global Espionage Campaign in Open Source Ecosystems (www.sonatype.com) submitted 1 year ago by pylapp@programming.dev to c/opensource@lemmy.ml 9 comments fedilink hide all child comments
[–] stsquad@lemmy.ml 9 points 1 year ago (1 child) I've long avoided npm but attacks on PyPi are a worry. permalink fedilink source hideshow 1 child comment replies: [–] helloworld@lemmy.ml 1 point 1 year ago If you are paranoid enough: Run all pypi packages in a QubesOs virtual machine I guess? permalink fedilink source parent
[–] helloworld@lemmy.ml 1 point 1 year ago If you are paranoid enough: Run all pypi packages in a QubesOs virtual machine I guess? permalink fedilink source parent