3 ms·
IIRC, go cannot run arbitrary code at build time, so that should not make it vulnerable
by saturn_vk 4mo ago
IIRC, go cannot run arbitrary code at build time, so that should not make it vulnerable
- matheusmoreira 4mo agoThat changes nothing. If you're downloading packages pushed by randoms, then it's vulnerable. There is no escaping it. Go's module index is filled with people's GitHub repositories. You have no idea what's inside those things unless you review the source yourself.
- gus_ 4mo agohttps://www.reddit.com/r/neovim/comments/1j45stl/someone_wrote_malicious_code_in_the_neovim_plugin/ https://www.reddit.com/r/neovim/comments/1j45stl/someone_wro...