←back to thread

NPM debug and chalk packages compromised

(www.aikido.dev)

1369 points universesquid | 1 comments | 08 Sep 25 15:37 UTC | HN request time: 0.268s | source

https://github.com/advisories/GHSA-8mgj-vmr8-frr6

1. tadamcz ◴[08 Sep 25 17:13 UTC] No.45170923[source]▶

>>45169657 (OP) #

Using a security key instead of TOTP would have prevented this.