Re:NPM debug and chalk packages compromised
by bflesch on Monday September 08, 2025 @12:29PM
(#45170308)
Thanks for sharing, I've created an OTX entry for this: https://otx.alienvault.com/pulse/68bf031ee0452072533deee6
[ Parent
| on HN ]
Re:NPM debug and chalk packages compromised
by dgl on Monday September 08, 2025 @08:11PM
(#45175807)
Just looking for "const _0x112" as an IOC seems a bit false positive prone: https://github.com/search?q=%2Fconst+_0x112%2F+lang%3Ajs&typ... (most of that code is pretty dodgy obviously, but it's not unique enough to identify this).