Absolutely. If you ever did a npm install on a project using one of the affected axios versions, your entire system may be compromised.
> The malicious versions inject a new dependency, [email protected], which is never imported anywhere in the axios source code. Its sole purpose is to execute a postinstall script that acts as a cross platform remote access trojan (RAT) dropper, targeting macOS, Windows, and Linux. The dropper contacts a live command and control server and delivers platform specific second stage payloads. After execution, the malware deletes itself and replaces its own package.json with a clean version to evade forensic detection.
Thank you. This is very different from my own experience and I find it fascinating.
My thoughts are mostly verbal. I do hear an inner voice all the time. I cannot easily catch the moment before words start to form. This excessive wordiness often leads me to a negative experience, it’s relatively easy to fall down on a spiral, worrying to much, going over and over about all the things that can go wrong. I just wish I had the ability to stop. I’m looking into meditation because of this.
I don’t want to sound harsh, but saying Javascript is a simpler version of Java just tells me you have never used Java seriously.
It’s like saying Korean is a simpler version of Spanish.
Yes, Java and Javascript are both programming languages, but they don’t even share the same paradigm.
You might be confusing the motivation that led to the creation of Javascript with the actual implementation.
Having said that, I have used Java professionally for more than 7 years, then I switched to mainly Javascript, and later to Typescript, and I’m never going back. I agree with your overall point.
If anyone was disrespectful in that occasion, it was Magnus. He refused to talk in the flash interview, went immediately to the press conference, and had to wait 90 seconds or so before deciding to leave because Karjakin was still in the flash interview Magnus had refused.