Hacker GitHub

← All repos

dominictarr/event-stream

View on GitHub ↗ ★ 2,174 JavaScript archived

EventStream is like functional programming meets IO

24 mentions on Hacker News by 24 people: 3 stories, 21 comments · first 2012-05-11 · latest 2023-05-30

Mentions per year 24 mentions · busiest year 2018 (16)
20082026
AllStoriesComments NewestTopOldest
  1. Another possible outcome of "I gave commit rights to someone I didn't know": https://github.com/dominictarr/event-stream/issues/116
    comment by psacawa · 2023-05-30 · in I gave commit rights to someone I didn't know (2016)
  2. …just gibberish? What if he uploaded on only npm and not on GitHub? Would we even notice that? [1]: https://github.com/dominictarr/event-stream/issues/116
    comment by jinseokim · 2022-01-11 · in What NPM should do to stop a new colors attack
  3. …times. For an example of this in the wild see the event-stream (crypto-mining trojan) fiasco: https://github.com/dominictarr/event-stream/issues/116 Dependencies are a target for exploit, your package may be safe now and then become unsafe…
    comment by cphoover · 2021-07-07 · in Npm Audit: broken by design?
  4. …But you'd have to be careful if you choose to hand off maintenance, because this can happen: https://github.com/dominictarr/event-stream/issues/116 So it isn't just a case of whether or not the code itself is bad. It's also about how you…
    comment by nonbirithm · 2020-05-17 · in It’s OK for your open source library to be a bit shitty (2015)
  5. …express updates should have instead been spent reviewing changes from somewhere else. [1]: https://github.com/dominictarr/event-stream/issues/116 [2]: https://blog.linuxmint.com/?p=2994 [3]: https://blogs.adobe.com/security/2012/09/inapprop…
    comment by hermanradtke · 2019-12-31 · in Automate GitHub Dependency Updates with Dependabot
  6. …of Pip will be keeping an eye on this over the next few months in case of intervening. [0] https://github.com/dominictarr/event-stream/issues/116#issue...
    comment by cfors · 2019-07-17 · in Issue: find a new home for repos including Requests
  7. …gone. Could this have effectively been the opposite spectrum of what happened with event-stream https://github.com/dominictarr/event-stream/issues/116 I'm not explicitly saying it's any of my business. I can imagine a multitude of reasons…
    comment by gU9x3u8XmQNG · 2018-12-05 · in Announcing Open Source of WPF, Windows Forms, and WinUI
  8. ▲ 2
    Warn HN: Malicious Package on NPM - check if you're affected
    story by neya · 2018-11-30 · 0 comments
  9. …project has been archived and closed for comments, but the issues posted 3 days ago are - special: https://github.com/dominictarr/event-stream/issues/121
    comment by sshadmand · 2018-11-30 · in NPM i event-stream 3.3.6 “404s”. Turns out was removed due to BC hack
  10. …use it anymore, and havn't for years. note: I no longer have publish rights to this module on npm." https://github.com/dominictarr/event-stream/issues/116#issue...
    comment by malikolivier · 2018-11-27 · in Statement on NPM Package Vulnerability in v5.0.2-5.1.0 of Copay Bitcoin Wallets
  11. The underlying story is here : https://github.com/dominictarr/event-stream/issues/116
    comment by dboreham · 2018-11-27 · in Statement on NPM Package Vulnerability in v5.0.2-5.1.0 of Copay Bitcoin Wallets
  12. …referring to this crypto-currency backdoor that was slipped into the event-stream dependency? https://github.com/dominictarr/event-stream/issues/116 Edit: it attempts to steal crypto-currency; it doesn't mine it.
    comment by BlahBoy3 · 2018-11-27 · in Open Source is Not About You
  13. I read this: https://github.com/dominictarr/event-stream/issues/116#issue... , which might seem controversial, but what was he supposed to do? I guess just let it rot and tell people to fork.
    comment by nkkollaw · 2018-11-27 · in If it's not fun anymore, you get nothing from maintaining a popular package
  14. The community discussion is focused on the wrong thing. Here is the problem: https://github.com/dominictarr/event-stream Look at that URL. It has "dominictarr" in it. Now click on the URL. Look at the big "dominictarr/event-stream" in the…
    comment by bit_logic · 2018-11-27 · in If it's not fun anymore, you get nothing from maintaining a popular package
  15. To an extent it's because his name is in the repo name (dominictarr/event-stream) https://github.com/dominictarr/event-stream so he is an easy and obvious scapegoat. But it seems people in general forgot that they are not paying and are…
    comment by TAForObvReasons · 2018-11-26 · in If it's not fun anymore, you get nothing from maintaining a popular package
  16. …a lot more packages that are infected with the same technique. I looked at the linked commits: https://github.com/dominictarr/event-stream/commits/master and it looks so surprisingly normal. I am pretty sure I wouldn't have caught it even…
    comment by zawerf · 2018-11-26 · in Backdoor in event-stream library dependency
  17. …scheme is to blame here It would have been better just to use URLs, so if you see "npm install https://github.com/dominictarr/event-stream" then it's clear you're trusting "github.com". (Yes, DNS is centralised. That can be fixed…
    comment by gregknicholson · 2018-11-26 · in Backdoor in event-stream library dependency
  18. The (most recent) payload turns out to attempt to steal Bitcoin wallets: https://github.com/dominictarr/event-stream/issues/116#issue...
    comment by Yetanfou · 2018-11-26 · in Backdoor in event-stream library dependency
  19. Looks like the sleuths on github just found out it targets a bitcoin wallet called `copay-dash` https://github.com/dominictarr/event-stream/issues/116#issue...
    comment by lexicality · 2018-11-26 · in Backdoor in event-stream library dependency
  20. Someone post a list of every public package that depend on that one https://github.com/dominictarr/event-stream/issues/116#issue... A lot of very common packages...
    comment by isseu · 2018-11-26 · in Backdoor in event-stream library dependency
  21. ▲ 1,034
    Backdoor in event-stream library dependency
    story by cnorthwood · 2018-11-26 · 491 comments
  22. ▲ 2
    Attempt of an injection attack
    story by mindw0rk · 2018-11-22 · 0 comments
  23. http://caolanmcmahon.com/posts/how_i_want_to_write_node_stre... http://highlandjs.org/ https://github.com/dominictarr/event-stream http://reactive-extensions.github.io/RxJS/
    comment by mambodog · 2014-06-07 · in The emperor's new clothes were built with Node.js
  24. …- https://github.com/dominictarr/JSONStream tap - https://github.com/isaacs/node-tap event-stream - https://github.com/dominictarr/event-stream
    comment by cjm · 2012-05-11 · in Our favorite node.js modules