• LeoOPMA
    link
    fedilink
    English
    11 year ago

    Yep. Just about any distribution of software has this risk. Pip and the NPM one are notorious for this type of thing.