2026-10-21 13:04 UTC
Oh, your comment made me understand the source of the confusion, I think. I was speaking about the distro itself, hinted by the author above me speaking about distros as well. But if we’re speaking about pip/npm/etc, then reverting those does make sense. I"ve edited my message to help resolve this misunderstanding.
Replies (1)
-
@fhein@lemmy.world 2026-10-21 13:23
I’m not sure what the previous poster was thinking of, but I also thought they were talking about distro packages. I meant my post to be a complement to yours, not a counter-argument. So far the recommendations I’ve seen have been to update OS ca-certificates, or to manually remove the compromised ones. And the Python devs are saying to update pip and uv. I guess the same goes for npm, but I uninstalled that a long time ago due to the abundance of supply chain attacks. I haven’t seen anyone trustworthy source recommend rolling anything back.