Malware in open-source web extensions
As if supply chain attacks, ransomwares and all the zero click wormable vulnerabilities we receive every other day were not enough.<p>I like gardening my small personal home server, services and backups but there is no reason debian packages could not be subject to the same supply chain "evil maid" or upstream "evil new maintainer". Everything being done in the open and reviewed makes it less probable, but not impossible. Sigh.<p>As a company, "risk" is mostly insurance. As an individual, it’s anxiety.