Pierre-Yves Lapersonne@programming.dev to Open Source@lemmy.ml · 25 days agoSonatype Uncovers Global Espionage Campaign in Open Source Ecosystemswww.sonatype.comexternal-linkmessage-square9fedilinkarrow-up186arrow-down13 cross-posted to: [email protected]
arrow-up183arrow-down1external-linkSonatype Uncovers Global Espionage Campaign in Open Source Ecosystemswww.sonatype.comPierre-Yves Lapersonne@programming.dev to Open Source@lemmy.ml · 25 days agomessage-square9fedilink cross-posted to: [email protected]
minus-squareAlex@lemmy.mllinkfedilinkarrow-up9·edit-225 days agoI’ve long avoided npm but attacks on PyPi are a worry.
minus-square🤗lemmyverseultrahug@lemmy.mllinkfedilinkarrow-up1·12 days agoIf you are paranoid enough: Run all pypi packages in a QubesOs virtual machine I guess?
I’ve long avoided npm but attacks on PyPi are a worry.
If you are paranoid enough: Run all pypi packages in a QubesOs virtual machine I guess?