News for hackers. Stuff that matters.

A comment on NPM debug and chalk packages compromised. Parent comment

Re:NPM debug and chalk packages compromised by FergusArgyll on Monday September 08, 2025 @12:38PM (#45170449)
0x66a9893cC07D91D95644AEDD05D03f95e1dBA8Af

0x10ed43c718714eb63d5aa57b78b54704e256024e

0x13f4ea83d0bd40e75c8222255bc855a974568dd4

0x1111111254eeb25477b68fb85ed929f73a960582

0xd9e1ce17f2641f24ae83637ab66a2cca9c378b9f

Source: https://github.com/chalk/chalk/issues/656#issuecomment-32670...

[ Parent | on HN ]
Re:NPM debug and chalk packages compromised by dbdr on Monday September 08, 2025 @03:22PM (#45172699)
Next comment:

> Those are swap contract addresses, not attacker addresses. E.g. 0x66a9893cC07D91D95644AEDD05D03f95e1dBA8Af the Uniswap v4 universal router addr.

> Every indication so far is that the attacker stole $0 from all of this. Which is a best-case outcome.

[ Parent | on HN ]
Re:NPM debug and chalk packages compromised by FergusArgyll on Monday September 08, 2025 @03:25PM (#45172741)
Oh, that makes much more sense - thanks!
[ Parent | on HN ]