Hundreds of code libraries posted to NPM try to install malware on dev machines - eviltoast
  • btaf45@lemmy.worldOP
    link
    fedilink
    English
    arrow-up
    2
    ·
    6 hours ago

    Yes. I can’t imagine being foolish enough to automatically update your external dependencies when you don’t need to.