That said, can’t lie, whenever I see a link to a project that looks cool, to find that the link is something like git.mysupercoolsite.net:3000, I click with nervous anticipation and wait with fingers crossed for it to actually load…
It might be package installations, pulling various config files in from a git remote, restoring documents, changing app settings, etc.
Thinking what’s the best way to automate all that? I guess probably a shell script should get me pretty far.
Both supply chain attacks, one a compromised build and the other a kind of social engineering hijacking of a no-longer-maintained repository.
https://librelounge.org/episodes/episode-2-thanksgiving-npm-and-malware-in-free-software.html
Huge respect to all those contributors over the years, what an achievement!
