Zerush@lemmy.ml to Open Source@lemmy.ml · 6 months agoOver 100,000 Infected Repos Found on GitHubapiiro.comexternal-linkmessage-square22fedilinkarrow-up162arrow-down11
arrow-up161arrow-down1external-linkOver 100,000 Infected Repos Found on GitHubapiiro.comZerush@lemmy.ml to Open Source@lemmy.ml · 6 months agomessage-square22fedilink
minus-squareerAck@discuss.tchncs.delinkfedilinkarrow-up2·6 months agoIf you installed the original legit package it can’t be updated with such fake one (without uninstalling and installing the bad one) as the signatures won’t match. If you initially install the bad package then yes of course.
If you installed the original legit package it can’t be updated with such fake one (without uninstalling and installing the bad one) as the signatures won’t match. If you initially install the bad package then yes of course.