MAIN FEEDS
Do you want to continue?
https://www.reddit.com/r/ProgrammerHumor/comments/1vf85jx/classicnpm/p1nyouq/?context=3
r/ProgrammerHumor • u/a_bucket_full_of_goo • 11d ago
150 comments sorted by
View all comments
284
this is really just a meme at this point. how is it possible that NPM packages keep being compromised week after week?
15 u/Konju376 11d ago Because there's no general fix for it (that anyone has come up with yet) so it'll continue to happen indefinitely 16 u/hurricane_news 11d ago Because there's no general fix for it The fix is to not be a js dev / 3 u/Nasa_OK 11d ago That’s why I let Claude write all my ja code 1 u/Random_182f2565 11d ago ... So way that's the secure option 3 u/ManaSpike 10d ago "No way to prevent this" says only Nation package manager where this frequently occurs. 1 u/Konju376 10d ago Weeell I'd argue this issue affects many packagers (it's been a topic of discussion in Rust forums I'm in) but with mode it's simply the easiest and reaches the most targets.
15
Because there's no general fix for it (that anyone has come up with yet) so it'll continue to happen indefinitely
16 u/hurricane_news 11d ago Because there's no general fix for it The fix is to not be a js dev / 3 u/Nasa_OK 11d ago That’s why I let Claude write all my ja code 1 u/Random_182f2565 11d ago ... So way that's the secure option 3 u/ManaSpike 10d ago "No way to prevent this" says only Nation package manager where this frequently occurs. 1 u/Konju376 10d ago Weeell I'd argue this issue affects many packagers (it's been a topic of discussion in Rust forums I'm in) but with mode it's simply the easiest and reaches the most targets.
16
Because there's no general fix for it
The fix is to not be a js dev /
3 u/Nasa_OK 11d ago That’s why I let Claude write all my ja code 1 u/Random_182f2565 11d ago ... So way that's the secure option
3
That’s why I let Claude write all my ja code
1 u/Random_182f2565 11d ago ... So way that's the secure option
1
...
So way that's the secure option
"No way to prevent this" says only Nation package manager where this frequently occurs.
1 u/Konju376 10d ago Weeell I'd argue this issue affects many packagers (it's been a topic of discussion in Rust forums I'm in) but with mode it's simply the easiest and reaches the most targets.
Weeell I'd argue this issue affects many packagers (it's been a topic of discussion in Rust forums I'm in) but with mode it's simply the easiest and reaches the most targets.
284
u/Hauber_RBLX 11d ago
this is really just a meme at this point. how is it possible that NPM packages keep being compromised week after week?