• magic_lobster_party@fedia.io
    41·
    1 day ago

    it’s the kind of dependency developers install without a second thought

    I got a feeling this is an attack vector that will continue to grow, as now there’s vibe coding frameworks installing random dependencies without a thought at all.

    • corsicanguppy@lemmy.caEnglish
      81·
      1 day ago

      There’s twonthings at play, here:

      • installing dependencies without checking
      • a framework that will allow this

      Both are absolutely the fault of the user.