Twitter Feed
@zkat__ ("kat marchán") wrote:
"please protect us from the NPM install scripts! It's arbitrary code execution!"
Says the people downloading and installing thousands of packages they have almost definitely not audited, in the face of vuln after vuln targeting execution-time.
I'm so glad this isn't my problem.