I love the smell of npm install malware in the morning. | Hacker News

Hacker Timesnew | past | comments | ask | show | jobs | submit

cozzyd 17 days ago | parent | context | favorite | on: AURpocalypse now: a look at the recent AUR attacks

I love the smell of npm install malware in the morning.

stephan-cr 17 days ago [–]

Yes, feels like in those cases npm and bun are not far away. Coincidence?

scott_w 17 days ago | [–]

Simplicity of the stack I think. I don’t think this is an npm-specific issue as the attacker could also download a bash script and run that instead.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact