Socket exposes a clever cross-ecosystem supply chain attack targeting PHP packages by hiding a malicious JS postinstall backdoor inside package.json.
      • LurkingLuddite@piefed.socialEnglish
        13·
        14 days ago

        I didn’t specify why. Interesting how defensive you clowns get, though glad to see you didn’t forget your makeup.

        • greyscaleAEnglish
          1·
          14 days ago

          Half the internet runs on PHP bro. It pays a lot of rent and mortgages.

          The toolchain is less hellish than JS for sure.

          Its a pragmatic choice and its very easy to disregard you and opinions when its indistinguishable from 2005 skiddy talk.