Socket exposes a clever cross-ecosystem supply chain attack targeting PHP packages by hiding a malicious JS postinstall backdoor inside package.json.
    • LurkingLuddite@piefed.socialEnglish
      13·
      15 days ago

      I didn’t specify why. Interesting how defensive you clowns get, though glad to see you didn’t forget your makeup.

      • greyscaleAEnglish
        1·
        15 days ago

        Half the internet runs on PHP bro. It pays a lot of rent and mortgages.

        The toolchain is less hellish than JS for sure.

        Its a pragmatic choice and its very easy to disregard you and opinions when its indistinguishable from 2005 skiddy talk.