this post was submitted on 24 Nov 2025
71 points (96.1% liked)

Technology

77058 readers
3163 users here now

This is a most excellent place for technology news and articles.

Our Rules

  1. Follow the lemmy.world rules.
  2. Only tech related news or articles.
  3. Be excellent to each other!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, this includes using AI responses and summaries. To ask if your bot can be added please contact a mod.
  9. Check for duplicates before posting, duplicates may be removed
  10. Accounts 7 days and younger will have their posts automatically removed.

Approved Bots

founded 2 years ago
MODERATORS
L3s@lemmy.world
enu@lemmy.world
technopagan@lemmy.world
L4s@lemmy.world
L3s@hackingne.ws
L4s@hackingne.ws
71
Shai-Hulud Returns: Over 300 NPM Packages Infected (helixguard.ai)
submitted 1 day ago by cyrano@piefed.social to c/technology@lemmy.world
14 comments fedilink hide all child comments
 

cross-posted from: https://lemmy.bestiver.se/post/758000

Comments

you are viewing a single comment's thread
view the rest of the comments
[–] fubarx@lemmy.world 2 points 7 hours ago* (last edited 7 hours ago)

That is pretty evil.

Without signing attestation (both developer and code) there will be no way to find out who was responsible and stop the propagation. This will happen again.

Edit: there have been attempts like https://docs.npmjs.com/trusted-publishers, but that hasn't fixed the problem.