• [object Object]@lemmy.ca
    link
    fedilink
    arrow-up
    39
    ·
    edit-2
    17 hours ago

    AUR: it happened to me, and one day it will happen to you!

    This is still the shai hulud worm.

    There’s no reason nixpkgs hasn’t been hacked yet. It jest depends on a few devs credentials being stolen, either by vscode, an npm package, a pypi dep, etc.