←back to thread

NPM debug and chalk packages compromised

(www.aikido.dev)
1369 points universesquid | 1 comments | 08 Sep 25 15:37 UTC | HN request time: 0s | source
Show context
marifjeren ◴[08 Sep 25 16:23 UTC] No.45170231[source]▶
Definitely sounds like spear phishing targeting you specifically.

Kudos to you for owning up to it.

As others have said, it's the kind of thing that could happen to anyone, unfortunately.

replies(1): >>45171130 #
1. mcjiggerlog ◴[08 Sep 25 17:28 UTC] No.45171130[source]▶
I also received the same phishing email and I only have packages with a few thousand downloads per week.