RE: https://cosocial.ca/@mhoye/116553395984214488
βSummary:
A compromised dependency in the JavaScript ecosystem led to credential theft, which enabled a supply chain attack on a Rust compression library, which was vendored into a Python build tool, which shipped malware to approximately 4 million developers before being inadvertently patched by an unrelated cryptocurrency mining worm.β
I see that today @andrewnez has chosen violence.
https://nesbitt.io/2026/02/03/incident-report-cve-2024-yikes.html
