Supply-chain attack hits RubyGems repository with 725 malicious packages https://arstechnica.com/information-technology/2020/04/725-bitcoin-stealing-apps-snuck-into-ruby-repository/
📦📦📦📦📦💣📦📦
📦💣📦📦📦📦📦📦
📦📦📦📦📦📦📦📦
📦📦📦📦💣💣📦📦
📦💣📦📦📦📦💣📦
📦📦📦📦📦📦📦📦
📦💣📦📦📦📦📦📦
@niconiconi HMM MAYBE COMPLETELY UNSUPERVISED LANGUAGE-SPECIFIC LIBRARY DUMPS ARE A BAD IDEA AND WE SHOULD LOOK AT HOW LINUX DISTRIBUTIONS ARE SOLVING THE PROBLEM
Follow
@mia @niconiconi And maybe, just maybe ... I know this sounds hopelessly old fashioned ... People should READ THE CODE THEY IMPORT.
