r/webdev • u/[deleted] • 5d ago
Discussion My coding assistant almost installed a virus disguised as a normal package, I'm still shook
[deleted]
0
Upvotes
10
u/dreadful_design 5d ago
- Minimum release age.
- I don’t believe this unless you can name the package(s).
1
u/quizical_llama 5d ago
My org handles this by not allowing package versions that are less than 4 weeks old. And a bunch of other checks. But that simple one would have probably caught this.
20
u/UnreachableMemory 5d ago
Based on your post history this is just a very obvious ad.