Megalodon chums the waters in 5.5K+ GitHub repo poisonings (opens in new tab)

(theregister.com)

4 pointssbulaev3d ago2 comments

2 comments

Okay, so what's the obvious solution to all this supply chain poisoning?

Pin deps. Integrity hashing. Wait to update to latest. Mirror through a proxy. Adhere to code scanner guidelines (--ignore-scripts).

j / k navigate · click thread line to collapse

Okay, so what's the obvious solution to all this supply chain poisoning?

Pin deps. Integrity hashing. Wait to update to latest. Mirror through a proxy. Adhere to code scanner guidelines (--ignore-scripts).

j / k navigate · click thread line to collapse