Security

2089 readers

7 users here now

A community for discussion about cybersecurity, hacking, cybersecurity news, exploits, bounties etc.

Rules :

All instance-wide rules apply.
Keep it totally legal.
Remember the human, be civil.
Be helpful, don't be rude.

Icon base by Delapouite under CC BY 3.0 with modifications to add a gradient

founded 2 years ago

MODERATORS

Vacant@programming.dev

GitHub Actions Cache Poisoning is eating open source (neciudan.dev)

submitted 2 weeks ago by codeinabox@programming.dev to c/security@programming.dev

6 comments fedilink hide all child comments

you are viewing a single comment's thread
view the rest of the comments

[–] Piatro@programming.dev 2 points 2 weeks ago (1 children)

Yes but the reality of JavaScript codebases is that you'll typically import hundreds if not thousands of dependencies fairly quickly. Last time I looked at the UI codebase at my job it was sitting at over 40k.

[–] lauha@lemmy.world 1 points 2 weeks ago

That's one of the reasons) why JS development is the shitshow it is.