Hacker News
new
|
past
|
comments
|
ask
|
show
|
jobs
|
submit
login
xiaq
on Jan 27, 2016
|
parent
|
context
|
favorite
| on:
Disabling npm's progress bar yields a 2x npm insta...
Not to mention that when the binary you are downloading happens match particular keywords.
teknologist
on Jan 27, 2016
|
next
[–]
Oh, that's fine. You can just download it from one of those mirror sites that host their own copies of the files. You can trust that it's genuine because of that big green checkmark on the page.
beerbajay
on Jan 27, 2016
|
prev
[–]
You just have to wait for a security worker to manually edit them out
Guidelines
|
FAQ
|
Lists
|
API
|
Security
|
Legal
|
Apply to YC
|
Contact
Search: