147
submitted 5 months ago by davel@lemmy.ml to c/programmerhumor@lemmy.ml
you are viewing a single comment's thread
view the rest of the comments
[-] davel@lemmy.ml 8 points 5 months ago

The recent attack didn’t have to do with cryptographic signatures. It was a supply chain worm, with GitHub Actions being the vector. https://snyk.io/blog/tanstack-npm-packages-compromised/

this post was submitted on 16 May 2026
147 points (98.0% liked)

Programmer Humor

43735 readers
41 users here now

Post funny things about programming here! (Or just rant about your favourite programming language.)

Rules:

founded 7 years ago
MODERATORS