Karna@lemmy.ml to Linux@lemmy.ml · 6 天前Arch Linux AUR Under Another Wave Of Malicious Packages, Package Adoptions Haltedwww.phoronix.comexternal-linkmessage-square71fedilinkarrow-up1186arrow-down12
arrow-up1184arrow-down1external-linkArch Linux AUR Under Another Wave Of Malicious Packages, Package Adoptions Haltedwww.phoronix.comKarna@lemmy.ml to Linux@lemmy.ml · 6 天前message-square71fedilink
minus-squarechgxvjh [he/him, comrade/them]@hexbear.netlinkfedilinkEnglisharrow-up3·6 天前Npm doesn’t let you easily take over packages you don’t own.
minus-squareCysio@lemmygrad.mllinkfedilinkarrow-up2arrow-down1·edit-26 天前but does let you take over their maintainers’ accounts and easily poison them
minus-squarechgxvjh [he/him, comrade/them]@hexbear.netlinkfedilinkEnglisharrow-up2·6 天前Not more easily than anything else.
Npm doesn’t let you easily take over packages you don’t own.
but does let you take over their maintainers’ accounts and easily poison them
Not more easily than anything else.