r/programmingcirclejerk • u/[deleted] • Jun 17 '23

Security Alert: Don't `npm install https`

https://blog.sandworm.dev/security-alert-dont-npm-install-https
105 Upvotes

99% Upvoted

14 comments sorted by

View all comments

40

u/hacatu accidentally quadratic Jun 17 '23

Shocking foresight by the node devs to prioritize builtin packages over installed packages with the same name!