-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Hi,
https://www.scmagazine.com/analysis/application-security/what-happens-when-protestware-sabotages-open-source-in-response-to-current-events - - need script off for the main site :( And this report fails to even mention: https://www.itnews.com.au/news/protestware-npm-package-dependency-labelled-supply-chain-attack-577488 ".... began to delete all files on systems in Belarus and Russia as a protest to the war in Ukraine." Can we trust itnews.com.au now? Amazing, this is disgusting behaviour and very detrimental to OSS and more broadly. Not happy AndrewM -----BEGIN PGP SIGNATURE----- iHUEAREIAB0WIQTJAoMHtC6YydLfjUOoFmvLt+/i+wUCYjQu2gAKCRCoFmvLt+/i +7hsAP95rZOnlt7WPucQYRUNvF7x5exqtz74tQUXRgm9gI76XgEAxU44YM/iSUs9 hy/w2jxxBLUSTz8V/bnhdQldi3Rqovc= =4J3E -----END PGP SIGNATURE----- _______________________________________________ luv-main mailing list -- [email protected] To unsubscribe send an email to [email protected]
