ZerushtoOpen Source@lemmy.ml·8 months agoOver 100,000 Infected Repos Found on GitHub(apiiro.com)external-linkarrow-up1208arrow-down14message-square26fedilink
arrow-up1204arrow-down1external-linkOver 100,000 Infected Repos Found on GitHub(apiiro.com)ZerushtoOpen Source@lemmy.ml·8 months agomessage-square26fedilink
minus-squareerAckarrow-up2arrow-down0·8 months agolinkfedilinkIf you installed the original legit package it can’t be updated with such fake one (without uninstalling and installing the bad one) as the signatures won’t match. If you initially install the bad package then yes of course.
If you installed the original legit package it can’t be updated with such fake one (without uninstalling and installing the bad one) as the signatures won’t match. If you initially install the bad package then yes of course.