qaz@lemmy.world to Selfhosted@lemmy.worldEnglish · 2 months agoAxios JavaScript library has been compromised with malware in supply chain attackgithub.comexternal-linkmessage-square12linkfedilinkarrow-up1229arrow-down10cross-posted to: opensource@lemmy.ml
arrow-up1229arrow-down1external-linkAxios JavaScript library has been compromised with malware in supply chain attackgithub.comqaz@lemmy.world to Selfhosted@lemmy.worldEnglish · 2 months agomessage-square12linkfedilinkcross-posted to: opensource@lemmy.ml
minus-squareEskueroAlinkfedilinkEnglisharrow-up11·2 months agoAs long as the bot is not allowed to automatically merge minor version bumps in libraries…
minus-squaremagikmw@piefed.sociallinkfedilinkEnglisharrow-up3·2 months agoWell yes, one can misuse any tool.
As long as the bot is not allowed to automatically merge minor version bumps in libraries…
Well yes, one can misuse any tool.