6 ms·

What other language ecosystems have had this happen systematically? This isn't even the first time this month!

• blueflow 1y ago
  Python/PyPi.
• johnisgood 1y ago
  Rust.
• LPisGood 1y ago
  Go has this issue
• SkyPuncher 1y ago
  NPM is the most popular, so it happens the most frequently. All of the other ecosystems are just as susceptible. Unix had a big scare last year because of XZ Utils. https://en.wikipedia.org/wiki/XZ_Utils_backdoor https://en.wikipedia.org/wiki/XZ_Utils_backdoor
  • Sankozi 1y ago
    No they are not as susceptible - auto updating dependencies, post install scripts and culture of thousands of crappy micro packages (like left-pad) is mainly a NPM issue.
    • zachrip 1y ago
      Packages are not auto updated if you have a package-lock. Agreed that post-install, left-pad, etc have been overall problematic tho.
• mdavidn 1y ago
  RubyGems is susceptible too.