←back to thread

Shai-Hulud malware attack: Tinycolor and over 40 NPM packages compromised

(socket.dev)
1208 points jamesberthoty | 2 comments | 16 Sep 25 11:22 UTC | HN request time: 0.524s | source
Show context
user3939382 ◴[16 Sep 25 12:34 UTC] No.45261383[source]▶
My comment yesterday, which received one downvote and which I will repeat if/until they’re gone: HTTP and JS have to go. There are ways to replace them.
replies(2): >>45261488 #>>45268221 #
progx ◴[16 Sep 25 12:46 UTC] No.45261488[source]▶
One downvote is not enough.
replies(1): >>45262129 #
user3939382 ◴[16 Sep 25 13:40 UTC] No.45262129[source]▶
One upvote is not enough. We need enough upvotes to fix the problem. You can’t shape a big pile of shit into success. HTTP and JS will never serve as a proper application framework.
replies(4): >>45267426 #>>45268159 #>>45270876 #>>45272045 #
1. garbagepatch ◴[17 Sep 25 05:25 UTC] No.45272045[source]▶
Upvotes won't fix the problem. Build the future you want, then people will come.
replies(1): >>45274887 #
2. user3939382 ◴[17 Sep 25 12:12 UTC] No.45274887[source]▶
Doing my best but it’s a lot of work