News for hackers. Stuff that matters.
Re:NPM debug and chalk packages compromised by zachrip on Monday September 08, 2025 @12:50PM (#45170608)
Thanks for sounding the alarm. I've sent an abuse email to porkbun to hopefully get the domain taken down.
Re:NPM debug and chalk packages compromised by junon on Monday September 08, 2025 @12:53PM (#45170642)
Thank you, I appreciate it! I did so as well and even called their support line to have them escalate it. Hopefully they'll treat this as an urgent thing; I'd imagine I'm far from the only one getting these.
Re:NPM debug and chalk packages compromised by zachrip on Monday September 08, 2025 @02:05PM (#45171682)
It's down, so there's some good news. Probably worth submitting to IC3 as well.