Or use pnpm. The latest versions have all dependency lifecycle scripts ignored by default. You must whitelist each package.
Same for bun, which I find faster than pnpm
Readit Newstrw55 commented on Malicious versions of Nx and some supporting plugins were published github.com/nrwl/nx/securi... · Posted by u/longcat
This whole article seems a bit pedantic, though I'll admit I am too dumb to grasp the bigger arguments.
Deleted Comment
trw55 commented on Iran asks its people to delete WhatsApp from their devices apnews.com/article/iran-w... · Posted by u/rdrd
I recommend "Careless People" by Sarah Wynn-Something
Read that book in two days. Wild stuff. Of course I don't absolve Sarah Wynn for of her responsibility that is Facebook and it's completely maliciously run company. She is also complicit I don't care how many "I was trying to do the right thing! Whaa!" she sprinkled throughout the book.
The fact that they successfully got the book removed from sale for a while speaks volumes. They not only lie they are encouraged to.
FUCK YOU I WON'T DO WHAT YOU TELL ME
MOTHER FUCKER!
trw55 commented on Zen browser had a backdoor enabled by default github.com/zen-browser/de... · Posted by u/nobunaga
One dev allowed remote debugging which introduced a backdoor and what's really bad about it is there was no prompt that the remote debugger had been started. He said he thought it would make debugging easier. That was a wtf moment for me. Sure, introduce that feature if you know what you're doing. The devs seem really inexperienced which is concerning.