tokudan[m] has quit [Read error: Connection reset by peer]
stammon has quit [Remote host closed the connection]
stammon has joined #nixos-security
tokudan[m] has joined #nixos-security
pie___ has joined #nixos-security
pie__ has quit [Ping timeout: 264 seconds]
pie___ has quit [Remote host closed the connection]
pie_ has joined #nixos-security
pie__ has joined #nixos-security
pie_ has quit [Remote host closed the connection]
MichaelRaskin has quit [Quit: MichaelRaskin]
periklis has joined #nixos-security
ckauhaus has joined #nixos-security
ivan_ has joined #nixos-security
sphalerite_ has joined #nixos-security
ckauhaus_ has joined #nixos-security
ckauhaus has quit [*.net *.split]
andi- has quit [*.net *.split]
johnnyfive has quit [*.net *.split]
ivan has quit [*.net *.split]
sphalerite has quit [*.net *.split]
lewo has quit [*.net *.split]
samueldr has quit [*.net *.split]
samueldr has joined #nixos-security
andi- has joined #nixos-security
periklis has quit [Ping timeout: 252 seconds]
__Sander__ has joined #nixos-security
ma27 has quit [Ping timeout: 245 seconds]
ma27 has joined #nixos-security
ivan_ is now known as ivan
sphalerite_ is now known as sphalerite
__Sander__ has quit [Quit: Konversation terminated!]
johnnyfive has joined #nixos-security
<pie__> this is probably going around link sites or something but https://github.com/dominictarr/event-stream/issues/116#issuecomment-441753388
<pie__> apparently someone gave some bad actor ownership of a popular package on npm or osmething
<andi-> yeah, I saw it... we can look through our stuff or if we even ship that crypto currency thingy in some form..
<pie__> i dont actually understand whats up with any of the npm related security shitstorms
<gchristensen> 17:42 <delroth> looks like a9efcc85cbfc0a8ebf5ab8dbfa914e9447018923..03bcca7a457e60bbfd80272347a2a85ff821b832 had the backdoored flatmap-stream package in nixpkgs.
<gchristensen> 17:42 <delroth> the other way around: 03bcca7a457e60bbfd80272347a2a85ff821b832..a9efcc85cbfc0a8ebf5ab8dbfa914e9447018923
<pie__> aparently these are avoidable problems?
<pie__> which is to say: ive never used node or npm
<pie__> (as a developer)