Karna@lemmy.ml to Linux@lemmy.ml · 12 hours agoArch Linux AUR Under Another Wave Of Malicious Packages, Package Adoptions Haltedwww.phoronix.comexternal-linkmessage-square31linkfedilinkarrow-up1105arrow-down12
arrow-up1103arrow-down1external-linkArch Linux AUR Under Another Wave Of Malicious Packages, Package Adoptions Haltedwww.phoronix.comKarna@lemmy.ml to Linux@lemmy.ml · 12 hours agomessage-square31linkfedilink
minus-squarechgxvjh [he/him, comrade/them]@hexbear.netlinkfedilinkEnglisharrow-up2·11 hours agoNpm doesn’t let you easily take over packages you don’t own.
minus-squareCysio@lemmygrad.mllinkfedilinkarrow-up1·9 hours agobut does let you take over their maintainers’ accounts and easily poison them
minus-squarechgxvjh [he/him, comrade/them]@hexbear.netlinkfedilinkEnglisharrow-up1·9 hours agoNot more easily than anything else.
Not the only repo, see: npm
Npm doesn’t let you easily take over packages you don’t own.
but does let you take over their maintainers’ accounts and easily poison them
Not more easily than anything else.