Open source strikes again

Open source strikes again

Attached: pp.png (1030x802, 140.58K)

Other urls found in this thread:

theregister.com/2022/05/24/pypi_ctx_package_compromised/
drewdevault.com/2022/05/12/Supply-chain-when-will-we-learn.html
twitter.com/NSFWRedditVideo

>php ass
don't say you weren't warned

here's something better than the twitter shit
theregister.com/2022/05/24/pypi_ctx_package_compromised/

Attached: 1631399826506.png (1032x2249, 468.37K)

this is why i write my own libraries

LOL

>trusting python
Doesn't this keep happening?

>Doesn't this keep happening?
with npm, yes. its not as common with pip

Debian solved the packaging issue some 30 years ago
creating a different package manager for each tech stack and having devs also be maintainers was a terrible idea
we're stuck with more security issues and killed the LTS model by design simple people just keep pushing shiny new stuff (tm) instead of making a stable release and pushing security patches to it

I see
Still people need to do research I've always had a fear of these third party package mangers because by design they make it easy to fuck people over

Add it to the list
drewdevault.com/2022/05/12/Supply-chain-when-will-we-learn.html