(www.aikido.dev)

1369 points universesquid | 2 comments | 08 Sep 25 15:37 UTC | HN request time: 0.409s | source

Show context

joaomoreno ◴[08 Sep 25 16:49 UTC] No.45170585[source]▶

From sindresorhus:

You can run the following to check if you have the malware in your dependency tree:

`rg -u --max-columns=80 _0x112fa8`

Requires ripgrep:

`brew install rg`

1. aerodynamic_ ◴[08 Sep 25 18:41 UTC] No.45172110[source]▶

convenience script that checks through package.json dependency tree + a couple malicious binary patterns:

replies(1): >>45190818 #

doesn't work for monorepos

NPM debug and chalk packages compromised