←back to thread

NPM debug and chalk packages compromised

(www.aikido.dev)
1369 points universesquid | 1 comments | 08 Sep 25 15:37 UTC | HN request time: 0.338s | source
Show context
xrd ◴[08 Sep 25 18:56 UTC] No.45172307[source]▶
It wouldn't be a perfect solution, but I wonder why browsers don't indicate the registration date for a domain in the URL bar somehow? I bet junon would have seen that and gotten suspicious.
replies(3): >>45174142 #>>45174236 #>>45178330 #
1. gaudystead ◴[08 Sep 25 21:19 UTC] No.45174142[source]▶
I like this idea and could see it being visually represented as a faint red/green bar behind the URL text in the address bar, with a greater amount of the bar being red when the domain is less trusted.

As for developers trusting a plugin that reaches out to an external location to determine the reputation of every website they visit seems like a harder sell though.