155
submitted 1 month ago by davel@lemmy.ml to c/programmerhumor@lemmy.ml
you are viewing a single comment's thread
view the rest of the comments
[-] davel@lemmy.ml 9 points 1 month ago

The recent attack didn’t have to do with cryptographic signatures. It was a supply chain worm, with GitHub Actions being the vector. https://snyk.io/blog/tanstack-npm-packages-compromised/

this post was submitted on 16 May 2026
155 points (97.5% liked)

Programmer Humor

42474 readers
3 users here now

Post funny things about programming here! (Or just rant about your favourite programming language.)

Rules:

founded 6 years ago
MODERATORS