Comment on Keylogger discovered in image generator extensionparentComments−dysoco2yFrom my outsider perspective, it's a field that moves very fast, there seem to be new tools being released every week so:1) As the developer if you focus on hardening, you might be too late to release.2) People downloading shiny new libs/files/programs constantly.3) Influx of people not that versed in the basics of computer security playing around with local LLM models, image generators, etc.−justinclift2yThat seems like an almost exact duplicate of the NodeJS/NPM issues?Those same points (but the NodeJS/NPM version of them) is a lot of why that ecosystem is having security and reputation issues as well.
Comments
From my outsider perspective, it's a field that moves very fast, there seem to be new tools being released every week so:
1) As the developer if you focus on hardening, you might be too late to release.
2) People downloading shiny new libs/files/programs constantly.
3) Influx of people not that versed in the basics of computer security playing around with local LLM models, image generators, etc.
That seems like an almost exact duplicate of the NodeJS/NPM issues?
Those same points (but the NodeJS/NPM version of them) is a lot of why that ecosystem is having security and reputation issues as well.