posted in Technology
Massive ChainDrop npm supply-chain attack infects more than 1,300 packages with a combined 2 billion monthly downloads on the Node Package Manager (npm) registry.
www.bleepingcomputer.com/news/security/massive-chaindrop-npm-supply-chain-attack-infects-hundreds-of-packages/
Replying to @eicker@lemmy.world
Jesus… Here we go again… as a normal Linux user non dev, do I just not update my PC for now? Until it’s known what devs may be compromised downstream?
Replying to @starblursd@lemmy.zip
It feels like this shit happens weekly. Dont worry about it. Let the upstream nerds sort it out in their build process.