←back to thread

NPM debug and chalk packages compromised

(www.aikido.dev)
1369 points universesquid | 1 comments | 08 Sep 25 15:37 UTC | HN request time: 0s | source
Show context
martypitt ◴[08 Sep 25 16:15 UTC] No.45170121[source]▶
A super quick script to check the deps in your package-lock.json file is here[0].

[0]: https://gist.github.com/martypitt/0d50c350aa7f0fc73354754343...

replies(2): >>45170178 #>>45170233 #
patates ◴[08 Sep 25 16:23 UTC] No.45170233[source]▶
aren't these already nuked and show up in the "npm audit" command?
replies(2): >>45170271 #>>45170303 #
1. martypitt ◴[08 Sep 25 16:26 UTC] No.45170271[source]▶
Nice - that's even better - thanks! TIL.