NPM debug and chalk packages compromised

Sorry, I am unfamiliar with ripgrep. Is this simply scanning for the string `_0x112fa8`? Could we do the same thing with normal grep -r?

yes. ripgrep just does it faster, is all.

I feel like you were trying to help here, but anyone can do this for themselves. Providing information in this way sort of indicates that you don't believe that the person you're replying to can do it on their own, and for that reason it's considered rude.

Make it work, make it right, make it fast.

For security checks, the first 2 out of 3 is just fine.

But also respects .gitignore by default so I’m not sure you want to use ripgrep to scan your node_modules

For others who didn't know, the -u flag in the OP's command makes it so ripgrep _will_ search files even if they're gitignored

Isn't the intended behaviour of original comment checking the node_modules folder for the "infected" string.

Also, HN hates machine generated replies, especially the lengthy and overly verbose slop variety -- I think that probably eclipsed any perceived rudeness.

Sure, but if you can get the last for free, why not?

I see what you mean, but I actually think there is a place for copy/pasting AI responses. I think of it as a kind of cache, surely a HN comment being served to n users means less resources used and faster access than if all n did their own AI query. But then of course you don’t get exactly your preference e.g. you might prefer a terser response than what is pasted here. Interesting to see how the etiquette around this plays out over time.

If you ever wanted to share an AI response, you probably should share your prompt, not the response. But likely you should not share anything, for the reasons already explained. Your argument about saving energy makes zero sense if you have any understanding of orders of magnitude but I won't share what AI says about it.

-u searches through ignored files

-uu searches through ignored and hidden files (eg dotfiles)

-uuu searches through ignored, hidden, and binary files (ie everything)

Ironically you are being incredibly rude trying to support an argument that posting AI responses is rude. I guess we can conclude you know nothing about anything.

I never mention rudeness, I dont give a shit about random people online being "rude". It's just something I don't like, so I shared my opinion.

Still ironic. Just so you know I might have considered what you said and changed my mind, but being rude made me dismiss you immediately. Just sharing my opinion