Pierre-Yves Lapersonne@programming.dev to Open Source@lemmy.ml · 14 days agoSonatype Uncovers Global Espionage Campaign in Open Source Ecosystemswww.sonatype.comexternal-linkmessage-square9fedilinkarrow-up184arrow-down11 cross-posted to: [email protected]
arrow-up183arrow-down1external-linkSonatype Uncovers Global Espionage Campaign in Open Source Ecosystemswww.sonatype.comPierre-Yves Lapersonne@programming.dev to Open Source@lemmy.ml · 14 days agomessage-square9fedilink cross-posted to: [email protected]
minus-squareAlex@lemmy.mllinkfedilinkarrow-up9·edit-214 days agoI’ve long avoided npm but attacks on PyPi are a worry.
minus-squarehelloworld@lemmy.mllinkfedilinkarrow-up1·22 hours agoIf you are paranoid enough: Run all pypi packages in a QubesOs virtual machine I guess?
I’ve long avoided npm but attacks on PyPi are a worry.
If you are paranoid enough: Run all pypi packages in a QubesOs virtual machine I guess?