←back to thread

NPM debug and chalk packages compromised

(www.aikido.dev)
1369 points universesquid | 2 comments | 08 Sep 25 15:37 UTC | HN request time: 0.414s | source
1. artooro ◴[08 Sep 25 15:20 UTC] No.45169434[source]▶
This looks pretty bad. Even if this only affects crypto wallets, I can't help but imagine how much worse this could be.

Another good read is at https://www.aikido.dev/blog/npm-debug-and-chalk-packages-com...

replies(1): >>45173454 #
2. dang ◴[08 Sep 25 20:22 UTC] No.45173454[source]▶
(This was originally posted to https://news.ycombinator.com/item?id=45168413 but we merged the threads)