Post #2718733
2026-05-19 08:53 UTC
Another round of npm malware. :neofox_googly_woozy: Is it really so unthinkable to create a system that doesn't rely on lifetime scripts with arbitrary capabilities?
Replies (1)
-
@mkj@social.mkj.earth 2026-05-19 09:43
@volpeon@icy.wyvern.rip But it's inevitable! It's the future! You don't want to be left behind in this time of technological marvels! You won't be replaced by a script in a NPM package running with root privileges, but by a human allowing a script in a NPM package to run with root privileges. Or so I've heard. It does feel like we're adding more and more dependencies on random third parties, but treat those dependencies as though they don't introduce any risk. That's not quite how the world works...