jeffwJul 4, 2024

384,000 sites pull code from sketchy code library recently bought by Chinese firm

https://lemmy.world/post/17202418

384,000 sites pull code from sketchy code library recently bought by Chinese firm - Lemmy.World

Show threadabacab
And that’s why you don’t use cdns
Jul 4, 2024 at 5:26amWeb
Show threadWindyRebelJul 4, 2024

CDNs are extremely helpful for sites being accessible and for load times worldwide.

I’m not sure what this comment is trying to get at.

Show threadAwesomeLowlanderJul 4, 2024
The issue isn’t CDNs. The issue is code that pulls the latest version of a library, opening it up to supply chain attacks like this. The solution would be to specify exact versions of a library to use.