←back to thread

NPM debug and chalk packages compromised

(www.aikido.dev)
1369 points universesquid | 2 comments | 08 Sep 25 15:37 UTC | HN request time: 0s | source
1. heipei ◴[08 Sep 25 18:54 UTC] No.45172280[source]▶
If you want to see what the phishing site (npmjs[.]help) looks like: https://urlscan.io/result/01992a3e-4f8c-72bb-90a9-c13826f2d8... - Was still up and running 2 hours ago.
replies(1): >>45177225 #
2. mdaniel ◴[09 Sep 25 03:57 UTC] No.45177225[source]▶
> Size: 3124 kB

Hey, that's a pretty good reproduction of npmjs