←back to thread

NPM debug and chalk packages compromised

(www.aikido.dev)
1369 points universesquid | 1 comments | 08 Sep 25 15:37 UTC | HN request time: 0.767s | source
Show context
xrd ◴[08 Sep 25 18:56 UTC] No.45172307[source]▶
It wouldn't be a perfect solution, but I wonder why browsers don't indicate the registration date for a domain in the URL bar somehow? I bet junon would have seen that and gotten suspicious.
replies(3): >>45174142 #>>45174236 #>>45178330 #
1. AtNightWeCode ◴[09 Sep 25 06:43 UTC] No.45178330[source]▶
There are curated lists over newly registered domain names that some security software uses so it should be easy to add without any privacy issues.