Looks similar
GitLab discovers widespread NPM supply chain attack(about.gitlab.com)
330 points by OuterVale | 181 comments
GitLab blog post describing a widespread npm supply chain malware attack that includes a "dead man's switch" capable of harming user data.
The ChatGPT/Codex app bundles a full copy of LibreOffice(simonwillison.net)
441 points by timpera | 206 comments
Short blog note by Simon Willison finding that the ChatGPT/Codex desktop app ships a 1.7GB runtime with Python, Node.js, Poppler, git and LibreOffice for skills.






