//
sign in
Post
by @danabra.mov
PostEmbed
by @danabra.mov
Record
by @jimpick.com
Record
by @atsui.org
+ new component
Post
This isn't even an AUR specific attack, the initial attack was publishing the malicious code through NPM in the first place, otherwise this wouldn't have worked as well as it seems to have.