• LeoOPMA
    link
    fedilink
    English
    19 months ago

    Yep. Just about any distribution of software has this risk. Pip and the NPM one are notorious for this type of thing.