<?xml version="1.0" encoding="UTF-8"?><rss xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:atom="http://www.w3.org/2005/Atom" version="2.0"><channel><title><![CDATA[No more JavaScript, it&#x27;s clear y&#x27;all can&#x27;t be trusted with it.]]></title><description><![CDATA[<p>No more JavaScript, it's clear y'all can't be trusted with it. I'm turning it off.</p>]]></description><link>https://board.circlewithadot.net/topic/b2fad9a1-a194-4db6-a2c4-dbb8b5f80708/no-more-javascript-it-s-clear-y-all-can-t-be-trusted-with-it.</link><generator>RSS for Node</generator><lastBuildDate>Mon, 25 May 2026 16:57:17 GMT</lastBuildDate><atom:link href="https://board.circlewithadot.net/topic/b2fad9a1-a194-4db6-a2c4-dbb8b5f80708.rss" rel="self" type="application/rss+xml"/><pubDate>Tue, 19 May 2026 19:03:34 GMT</pubDate><ttl>60</ttl><item><title><![CDATA[Reply to No more JavaScript, it&#x27;s clear y&#x27;all can&#x27;t be trusted with it. on Thu, 21 May 2026 18:38:42 GMT]]></title><description><![CDATA[<p><span><a href="/user/lil5%40social.last.nl">@<span>lil5</span></a></span> <span><a href="/user/huronbikes%40cyberplace.social">@<span>huronbikes</span></a></span> <span><a href="/user/darfplatypus%40infosec.exchange">@<span>darfplatypus</span></a></span> a group im part of are just starting a migration from bun to deno. am not really involved but it seems like the best option currently.</p>]]></description><link>https://board.circlewithadot.net/post/https://infosec.exchange/users/novet/statuses/116614019325876320</link><guid isPermaLink="true">https://board.circlewithadot.net/post/https://infosec.exchange/users/novet/statuses/116614019325876320</guid><dc:creator><![CDATA[novet@infosec.exchange]]></dc:creator><pubDate>Thu, 21 May 2026 18:38:42 GMT</pubDate></item><item><title><![CDATA[Reply to No more JavaScript, it&#x27;s clear y&#x27;all can&#x27;t be trusted with it. on Thu, 21 May 2026 10:52:51 GMT]]></title><description><![CDATA[<p><span><a href="/user/darfplatypus%40infosec.exchange">@<span>darfplatypus</span></a></span> This is long overdue and I applaud your willingness to take this needful corrective action.</p>]]></description><link>https://board.circlewithadot.net/post/https://tech.lgbt/users/jkdelauney/statuses/116612187553154848</link><guid isPermaLink="true">https://board.circlewithadot.net/post/https://tech.lgbt/users/jkdelauney/statuses/116612187553154848</guid><dc:creator><![CDATA[jkdelauney@tech.lgbt]]></dc:creator><pubDate>Thu, 21 May 2026 10:52:51 GMT</pubDate></item><item><title><![CDATA[Reply to No more JavaScript, it&#x27;s clear y&#x27;all can&#x27;t be trusted with it. on Thu, 21 May 2026 01:42:40 GMT]]></title><description><![CDATA[<p><span><a href="/user/darfplatypus%40infosec.exchange" rel="nofollow noopener">@<span>darfplatypus</span></a></span> better be safe and cut the plug off</p>]]></description><link>https://board.circlewithadot.net/post/https://tech.lgbt/users/glitchcake/statuses/116610024081898721</link><guid isPermaLink="true">https://board.circlewithadot.net/post/https://tech.lgbt/users/glitchcake/statuses/116610024081898721</guid><dc:creator><![CDATA[glitchcake@tech.lgbt]]></dc:creator><pubDate>Thu, 21 May 2026 01:42:40 GMT</pubDate></item><item><title><![CDATA[Reply to No more JavaScript, it&#x27;s clear y&#x27;all can&#x27;t be trusted with it. on Wed, 20 May 2026 23:01:21 GMT]]></title><description><![CDATA[<p><span><a href="/user/darfplatypus%40infosec.exchange">@<span>darfplatypus</span></a></span></p>

<div class="row mt-3"><div class="col-12 mt-3"><img class="img-thumbnail" src="https://cdn.fosstodon.org/media_attachments/files/116/609/359/137/646/511/original/184ad3e1422ce269.png" alt="Link Preview Image" /></div></div>]]></description><link>https://board.circlewithadot.net/post/https://fosstodon.org/users/sleet01/statuses/116609389800440222</link><guid isPermaLink="true">https://board.circlewithadot.net/post/https://fosstodon.org/users/sleet01/statuses/116609389800440222</guid><dc:creator><![CDATA[sleet01@fosstodon.org]]></dc:creator><pubDate>Wed, 20 May 2026 23:01:21 GMT</pubDate></item><item><title><![CDATA[Reply to No more JavaScript, it&#x27;s clear y&#x27;all can&#x27;t be trusted with it. on Wed, 20 May 2026 22:52:18 GMT]]></title><description><![CDATA[<p><span><a href="/user/darfplatypus%40infosec.exchange">@<span>darfplatypus</span></a></span> can you turn ai off while you are at it?</p>]]></description><link>https://board.circlewithadot.net/post/https://biplus.social/users/linkplay/statuses/116609354170472091</link><guid isPermaLink="true">https://board.circlewithadot.net/post/https://biplus.social/users/linkplay/statuses/116609354170472091</guid><dc:creator><![CDATA[linkplay@biplus.social]]></dc:creator><pubDate>Wed, 20 May 2026 22:52:18 GMT</pubDate></item><item><title><![CDATA[Reply to No more JavaScript, it&#x27;s clear y&#x27;all can&#x27;t be trusted with it. on Wed, 20 May 2026 19:53:57 GMT]]></title><description><![CDATA[<p><span><a href="/user/novet%40infosec.exchange" rel="nofollow noreferrer noopener">@<span>novet</span></a></span> <span><a href="/user/huronbikes%40cyberplace.social" rel="nofollow noreferrer noopener">@<span>huronbikes</span></a></span> <span><a href="/user/darfplatypus%40infosec.exchange" rel="nofollow noreferrer noopener">@<span>darfplatypus</span></a></span></p><p>I’ve really enjoyed pnpm and deno they’re both great indeed</p>]]></description><link>https://board.circlewithadot.net/post/https://social.last.nl/users/lil5/statuses/01KS3F7DVQSV98VRT0RFW8V0WZ</link><guid isPermaLink="true">https://board.circlewithadot.net/post/https://social.last.nl/users/lil5/statuses/01KS3F7DVQSV98VRT0RFW8V0WZ</guid><dc:creator><![CDATA[lil5@social.last.nl]]></dc:creator><pubDate>Wed, 20 May 2026 19:53:57 GMT</pubDate></item><item><title><![CDATA[Reply to No more JavaScript, it&#x27;s clear y&#x27;all can&#x27;t be trusted with it. on Wed, 20 May 2026 19:38:38 GMT]]></title><description><![CDATA[<p><span><a href="/user/darfplatypus%40infosec.exchange">@<span>darfplatypus</span></a></span></p>

<div class="row mt-3"><div class="col-12 mt-3"><div class="ratio ratio-16x9">
<video controls width="370" height="280">
<source src="https://files.mastodon.online/media_attachments/files/116/608/581/605/819/962/original/c10328207ff66338.mp4" type="video/mp4"></source>
</video>
</div></div></div>]]></description><link>https://board.circlewithadot.net/post/https://mastodon.online/users/aanee/statuses/116608592696846797</link><guid isPermaLink="true">https://board.circlewithadot.net/post/https://mastodon.online/users/aanee/statuses/116608592696846797</guid><dc:creator><![CDATA[aanee@mastodon.online]]></dc:creator><pubDate>Wed, 20 May 2026 19:38:38 GMT</pubDate></item><item><title><![CDATA[Reply to No more JavaScript, it&#x27;s clear y&#x27;all can&#x27;t be trusted with it. on Wed, 20 May 2026 19:28:04 GMT]]></title><description><![CDATA[<p><span><a href="/user/darfplatypus%40infosec.exchange">@<span>darfplatypus</span></a></span> From my cold dead SSDs</p>]]></description><link>https://board.circlewithadot.net/post/https://mastodon.social/users/tkissing/statuses/116608551112211519</link><guid isPermaLink="true">https://board.circlewithadot.net/post/https://mastodon.social/users/tkissing/statuses/116608551112211519</guid><dc:creator><![CDATA[tkissing@mastodon.social]]></dc:creator><pubDate>Wed, 20 May 2026 19:28:04 GMT</pubDate></item><item><title><![CDATA[Reply to No more JavaScript, it&#x27;s clear y&#x27;all can&#x27;t be trusted with it. on Wed, 20 May 2026 18:35:38 GMT]]></title><description><![CDATA[<p><span><a href="/user/lil5%40social.last.nl">@<span>lil5</span></a></span> <span><a href="/user/huronbikes%40cyberplace.social">@<span>huronbikes</span></a></span> <span><a href="/user/darfplatypus%40infosec.exchange">@<span>darfplatypus</span></a></span> what's great is that afaik you can turn off postinstall on most of these package managers</p><p>hell, most even introduced options to set a window where it won't update to the latest package if a release is within the time window.</p>]]></description><link>https://board.circlewithadot.net/post/https://infosec.exchange/users/novet/statuses/116608344973115983</link><guid isPermaLink="true">https://board.circlewithadot.net/post/https://infosec.exchange/users/novet/statuses/116608344973115983</guid><dc:creator><![CDATA[novet@infosec.exchange]]></dc:creator><pubDate>Wed, 20 May 2026 18:35:38 GMT</pubDate></item><item><title><![CDATA[Reply to No more JavaScript, it&#x27;s clear y&#x27;all can&#x27;t be trusted with it. on Wed, 20 May 2026 18:35:08 GMT]]></title><description><![CDATA[<p><span><a href="/user/darfplatypus%40infosec.exchange">@<span>darfplatypus</span></a></span> (pauses with a spoonful of JavaScript halfway to mouth) (tries to hide the rest of the bowl behind back) it's just lucky charms</p>]]></description><link>https://board.circlewithadot.net/post/https://mastodon.art/users/secretsloth/statuses/116608342974784803</link><guid isPermaLink="true">https://board.circlewithadot.net/post/https://mastodon.art/users/secretsloth/statuses/116608342974784803</guid><dc:creator><![CDATA[secretsloth@mastodon.art]]></dc:creator><pubDate>Wed, 20 May 2026 18:35:08 GMT</pubDate></item><item><title><![CDATA[Reply to No more JavaScript, it&#x27;s clear y&#x27;all can&#x27;t be trusted with it. on Wed, 20 May 2026 18:34:13 GMT]]></title><description><![CDATA[<p><span><a href="/user/darfplatypus%40infosec.exchange">@<span>darfplatypus</span></a></span> go screw yourself, AL HAIL SAINT JAVASCRIPT</p>]]></description><link>https://board.circlewithadot.net/post/https://ioc.exchange/ap/users/116596538263481113/statuses/116608339385573711</link><guid isPermaLink="true">https://board.circlewithadot.net/post/https://ioc.exchange/ap/users/116596538263481113/statuses/116608339385573711</guid><dc:creator><![CDATA[abt1181@ioc.exchange]]></dc:creator><pubDate>Wed, 20 May 2026 18:34:13 GMT</pubDate></item><item><title><![CDATA[Reply to No more JavaScript, it&#x27;s clear y&#x27;all can&#x27;t be trusted with it. on Tue, 19 May 2026 23:08:28 GMT]]></title><description><![CDATA[<p><span><a href="/user/darfplatypus%40infosec.exchange">@<span>darfplatypus</span></a></span> Yay!!!!</p>]]></description><link>https://board.circlewithadot.net/post/https://infosec.exchange/users/Epic_Null/statuses/116603755471048742</link><guid isPermaLink="true">https://board.circlewithadot.net/post/https://infosec.exchange/users/Epic_Null/statuses/116603755471048742</guid><dc:creator><![CDATA[epic_null@infosec.exchange]]></dc:creator><pubDate>Tue, 19 May 2026 23:08:28 GMT</pubDate></item><item><title><![CDATA[Reply to No more JavaScript, it&#x27;s clear y&#x27;all can&#x27;t be trusted with it. on Tue, 19 May 2026 22:14:08 GMT]]></title><description><![CDATA[<p><span><a href="/user/lil5%40social.last.nl">@<span>lil5</span></a></span> <span><a href="/user/darfplatypus%40infosec.exchange">@<span>darfplatypus</span></a></span></p>

<div class="row mt-3"><div class="col-12 mt-3"><img class="img-thumbnail" src="https://cyberplace.social/system/media_attachments/files/116/603/535/600/671/781/original/be2dcd10e5be8ced.png" alt="Link Preview Image" /></div></div>]]></description><link>https://board.circlewithadot.net/post/https://cyberplace.social/users/huronbikes/statuses/116603541820487527</link><guid isPermaLink="true">https://board.circlewithadot.net/post/https://cyberplace.social/users/huronbikes/statuses/116603541820487527</guid><dc:creator><![CDATA[huronbikes@cyberplace.social]]></dc:creator><pubDate>Tue, 19 May 2026 22:14:08 GMT</pubDate></item><item><title><![CDATA[Reply to No more JavaScript, it&#x27;s clear y&#x27;all can&#x27;t be trusted with it. on Tue, 19 May 2026 21:55:30 GMT]]></title><description><![CDATA[<p><span><a href="/user/huronbikes%40cyberplace.social" rel="nofollow noreferrer noopener">@<span>huronbikes</span></a></span> <span><a href="/user/darfplatypus%40infosec.exchange" rel="nofollow noreferrer noopener">@<span>darfplatypus</span></a></span> omfg it’s been that long</p><p><div class="card col-md-9 col-lg-6 position-relative link-preview p-0">



<a href="https://blog.npmjs.org/post/141702881055/package-install-scripts-vulnerability" title="npm Blog Archive: Package install scripts vulnerability">
<img src="https://user-images.githubusercontent.com/29712634/81721690-e2fb5d80-9445-11ea-8602-4b2294c964f3.png" class="card-img-top not-responsive" style="max-height: 15rem;" alt="Link Preview Image" />
</a>



<div class="card-body">
<h5 class="card-title">
<a href="https://blog.npmjs.org/post/141702881055/package-install-scripts-vulnerability">
npm Blog Archive: Package install scripts vulnerability
</a>
</h5>
<p class="card-text line-clamp-3">npm Blog (Archive); updates from the npm team are now published on the GitHub Blog and the GitHub Changelog</p>
</div>
<a href="https://blog.npmjs.org/post/141702881055/package-install-scripts-vulnerability" class="card-footer text-body-secondary small d-flex gap-2 align-items-center lh-2">



<img src="https://blog.npmjs.org/favicon-32x32.png" alt="favicon" class="not-responsive overflow-hiddden" style="max-width: 21px; max-height: 21px;" />



















<p class="d-inline-block text-truncate mb-0"> <span class="text-secondary">(blog.npmjs.org)</span></p>
</a>
</div></p><p>Looks at published date: March 25th, 2016 10:16pm</p>]]></description><link>https://board.circlewithadot.net/post/https://social.last.nl/users/lil5/statuses/01KS13S87K2QD5VHY0BB8AWTSS</link><guid isPermaLink="true">https://board.circlewithadot.net/post/https://social.last.nl/users/lil5/statuses/01KS13S87K2QD5VHY0BB8AWTSS</guid><dc:creator><![CDATA[lil5@social.last.nl]]></dc:creator><pubDate>Tue, 19 May 2026 21:55:30 GMT</pubDate></item><item><title><![CDATA[Reply to No more JavaScript, it&#x27;s clear y&#x27;all can&#x27;t be trusted with it. on Tue, 19 May 2026 21:40:54 GMT]]></title><description><![CDATA[<p><span><a href="/user/lil5%40social.last.nl">@<span>lil5</span></a></span> <span><a href="/user/darfplatypus%40infosec.exchange">@<span>darfplatypus</span></a></span> *stares in lpad incident from 10 years back from which nothing of value was learned*</p>]]></description><link>https://board.circlewithadot.net/post/https://cyberplace.social/users/huronbikes/statuses/116603411106109080</link><guid isPermaLink="true">https://board.circlewithadot.net/post/https://cyberplace.social/users/huronbikes/statuses/116603411106109080</guid><dc:creator><![CDATA[huronbikes@cyberplace.social]]></dc:creator><pubDate>Tue, 19 May 2026 21:40:54 GMT</pubDate></item><item><title><![CDATA[Reply to No more JavaScript, it&#x27;s clear y&#x27;all can&#x27;t be trusted with it. on Tue, 19 May 2026 21:36:42 GMT]]></title><description><![CDATA[<p><span><a href="/user/huronbikes%40cyberplace.social" rel="nofollow noreferrer noopener">@<span>huronbikes</span></a></span> <span><a href="/user/darfplatypus%40infosec.exchange" rel="nofollow noreferrer noopener">@<span>darfplatypus</span></a></span> The problem lies with npm postinstall, as soon as we all collectively agree to use a package manager that doesn’t run a postinstall script of any dependency you install, this goes away.</p><p>Pnpm bun idk.</p>]]></description><link>https://board.circlewithadot.net/post/https://social.last.nl/users/lil5/statuses/01KS12PV1T42QEDSHZ148YC0ME</link><guid isPermaLink="true">https://board.circlewithadot.net/post/https://social.last.nl/users/lil5/statuses/01KS12PV1T42QEDSHZ148YC0ME</guid><dc:creator><![CDATA[lil5@social.last.nl]]></dc:creator><pubDate>Tue, 19 May 2026 21:36:42 GMT</pubDate></item><item><title><![CDATA[Reply to No more JavaScript, it&#x27;s clear y&#x27;all can&#x27;t be trusted with it. on Tue, 19 May 2026 20:01:57 GMT]]></title><description><![CDATA[<p><span><a href="/user/huronbikes%40cyberplace.social" rel="nofollow noopener">@<span>huronbikes</span></a></span> <span><a href="/user/darfplatypus%40infosec.exchange">@<span>darfplatypus</span></a></span> perfect, no notes</p>]]></description><link>https://board.circlewithadot.net/post/https://infosec.exchange/ap/users/116495497907110700/statuses/116603022052629238</link><guid isPermaLink="true">https://board.circlewithadot.net/post/https://infosec.exchange/ap/users/116495497907110700/statuses/116603022052629238</guid><dc:creator><![CDATA[sharkfie@infosec.exchange]]></dc:creator><pubDate>Tue, 19 May 2026 20:01:57 GMT</pubDate></item><item><title><![CDATA[Reply to No more JavaScript, it&#x27;s clear y&#x27;all can&#x27;t be trusted with it. on Tue, 19 May 2026 20:00:45 GMT]]></title><description><![CDATA[<p><span><a href="/user/darfplatypus%40infosec.exchange">@<span>darfplatypus</span></a></span> <em>eyes <a href="https://www.aikido.dev/blog/durabletask-package-compromised-mini-shai-hulud" rel="nofollow noopener"><span>https://www.</span><span>aikido.dev/blog/durabletask-pa</span><span>ckage-compromised-mini-shai-hulud</span></a></em> don't you dare touch my snek! <img class="not-responsive emoji" src="https://media.infosec.exchange/infosec.exchange/custom_emojis/images/000/617/503/original/06ba5274b7d78989.png" title=":brdAngry:" /></p>]]></description><link>https://board.circlewithadot.net/post/https://infosec.exchange/users/nyanbinary/statuses/116603017344694390</link><guid isPermaLink="true">https://board.circlewithadot.net/post/https://infosec.exchange/users/nyanbinary/statuses/116603017344694390</guid><dc:creator><![CDATA[nyanbinary@infosec.exchange]]></dc:creator><pubDate>Tue, 19 May 2026 20:00:45 GMT</pubDate></item><item><title><![CDATA[Reply to No more JavaScript, it&#x27;s clear y&#x27;all can&#x27;t be trusted with it. on Tue, 19 May 2026 19:55:14 GMT]]></title><description><![CDATA[<p><span><a href="/user/darfplatypus%40infosec.exchange">@<span>darfplatypus</span></a></span></p>

<div class="row mt-3"><div class="col-12 mt-3"><img class="img-thumbnail" src="https://cyberplace.social/system/media_attachments/files/116/602/980/903/615/606/original/79e825daf3fe3fb0.png" alt="Link Preview Image" /></div></div>]]></description><link>https://board.circlewithadot.net/post/https://cyberplace.social/users/huronbikes/statuses/116602995617993579</link><guid isPermaLink="true">https://board.circlewithadot.net/post/https://cyberplace.social/users/huronbikes/statuses/116602995617993579</guid><dc:creator><![CDATA[huronbikes@cyberplace.social]]></dc:creator><pubDate>Tue, 19 May 2026 19:55:14 GMT</pubDate></item><item><title><![CDATA[Reply to No more JavaScript, it&#x27;s clear y&#x27;all can&#x27;t be trusted with it. on Tue, 19 May 2026 19:03:52 GMT]]></title><description><![CDATA[<p><span><a href="/user/darfplatypus%40infosec.exchange">@<span>darfplatypus</span></a></span> Fuckin <strong>FINALLY</strong></p>]]></description><link>https://board.circlewithadot.net/post/https://infosec.exchange/users/cR0w/statuses/116602793682505258</link><guid isPermaLink="true">https://board.circlewithadot.net/post/https://infosec.exchange/users/cR0w/statuses/116602793682505258</guid><dc:creator><![CDATA[cr0w@infosec.exchange]]></dc:creator><pubDate>Tue, 19 May 2026 19:03:52 GMT</pubDate></item></channel></rss>