Re:NPM debug and chalk packages compromised
by Kwpolska on Monday September 08, 2025 @01:16PM
(#45170963)
People never paid attention to the special EV cert markers. And even if they did, what would stop someone from registering a company named "npm, Inc." and buying an EV cert for it? Sure, it’s going to cost some money upfront, but you can make much more by stealing cleptocurrency.
[ Parent
| on HN ]
There are no comments on this comment yet.