News for hackers. Stuff that matters.
Re:NPM debug and chalk packages compromised by jbverschoor on Monday September 08, 2025 @12:36PM (#45170407)
Doesn’t npmjs do things like signing, pinning, and yanking packages, like rubygems?
Re:NPM debug and chalk packages compromised by paulddraper on Monday September 08, 2025 @02:48PM (#45172206)
Yes