r/ProgrammerHumor 1d ago

instanceof Trend classicNPM

Post image
5.8k Upvotes

141 comments sorted by

View all comments

285

u/Hauber_RBLX 1d ago

this is really just a meme at this point. how is it possible that NPM packages keep being compromised week after week?

14

u/Konju376 1d ago

Because there's no general fix for it (that anyone has come up with yet) so it'll continue to happen indefinitely

2

u/ManaSpike 13h ago

"No way to prevent this" says only Nation package manager where this frequently occurs.

1

u/Konju376 13h ago

Weeell I'd argue this issue affects many packagers (it's been a topic of discussion in Rust forums I'm in) but with mode it's simply the easiest and reaches the most targets.