Highly invasive backdoor snuck into open source packages targets developers

arstechnica.com

17 pointscarride2 comments

the site guidelines state <https://news.ycombinator.com/newsguidelines.html> that original sources are preferred over the hot-takes of hundreds of rando sites

https://news.ycombinator.com/item?id=38195047

also, "into open source PYTHON packages" would allow more targeted pearl-clutching

I think ars goes for fear of the unknown clickbaiting. Ars Technica really has relegated themselves into "hot take of a rando site" territory, which is unfortunate.

Reply on news.ycombinator.com