How do you test your projects if there are any infected/affected dependencies used? As i understand it could also be a dependency of a dependency ... that could be affected?

thepill

·il y a 8 mois·discuss

Or bun

thepill

·il y a 9 mois·discuss

Or hold [Shift] while right clicking

thepill

·il y a 9 mois·discuss

I recently learned about https://garagehq.deuxfleurs.fr/ but i have no expirience using it

thepill

·il y a 9 mois·discuss

Watching Mr. Robot and seeing the burned batteries the same time...

thepill

·il y a 10 mois·discuss

I understand the problem mentioned with mcp servers but this kind of attack could happen to any external dependency (like a smtp package) i guess

thepill

·il y a 10 mois·discuss

bun is also working on it: https://github.com/oven-sh/bun/issues/22679

thepill

·il y a 11 mois·discuss

The same thing that happend to grafana?

https://grafana.com/blog/2025/05/15/grafana-security-update-...

thepill

·l’année dernière·discuss

Which models are you using?

thepill

·il y a 2 ans·discuss

I like passkeys - as a second factor