Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Installing 3rd party packages the way Node and Python devs do regularly _is_ a security hole.


We definitely agree on that. Fortunately some of the 600+ comments here include suggestions of what to do about it.




Consider applying for YC's Fall 2026 batch! Applications are open till July 27.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: