News for hackers. Stuff that matters.

A comment on NPM debug and chalk packages compromised. Parent comment

Re:NPM debug and chalk packages compromised by jacquesm on Monday September 08, 2025 @01:15PM (#45170943)
I hate that kind of email when sent out legitimately. Google does this crap all the time pretty much conditioning their customers to click those links. And if you're really lucky it's from some subdomain they never bothered advertising as legit.

Great of you to own up to it.

[ Parent | on HN ]
Re:NPM debug and chalk packages compromised by mikeryan on Monday September 08, 2025 @04:12PM (#45173331)
I’ve started ignoring these types of emails and wait to do any sort of credentials reset until I get an alert when I log in (or try to) for just this reason.
[ Parent | on HN ]
Re:NPM debug and chalk packages compromised by antod on Monday September 08, 2025 @04:42PM (#45173703)
Atlassian and MS are terrible for making email notifications that are really hard to distinguish from phishing emails. Using hard to identify undocumented random domains in long redirect chains, obfuscating links etc etc.
[ Parent | on HN ]