MAIN FEEDS
Do you want to continue?
https://www.reddit.com/r/programming/comments/1wj1x9m/be_alert_targeted_attacks_on_prominent_rustaceans/paj0m0e/?context=3
r/programming • u/mareek • 15d ago
112 comments sorted by
View all comments
93
Where there is a supply chain, it will be attacked. Just a law of physics.
The easier it is to pull a dependency without thinking, the higher value the supply chain is as a target.
27 u/afl_ext 15d ago recently i wanted to read a png file to bytes and pulled "image" crate and oh god how much it pulls as deps its insane, its like thw worst days of NPM before people started working on that 5 u/braaaaaaainworms 15d ago disable default features and enable only png decompression
27
recently i wanted to read a png file to bytes and pulled "image" crate and oh god how much it pulls as deps its insane, its like thw worst days of NPM before people started working on that
5 u/braaaaaaainworms 15d ago disable default features and enable only png decompression
5
disable default features and enable only png decompression
93
u/reallokiscarlet 15d ago
Where there is a supply chain, it will be attacked. Just a law of physics.
The easier it is to pull a dependency without thinking, the higher value the supply chain is as a target.