NPM debug and chalk packages compromised

Re:NPM debug and chalk packages compromised by skrebbel on Monday September 08, 2025 @01:41PM (#45171316)

yes. ripgrep just does it faster, is all.

[ Parent | on HN ]

Re:NPM debug and chalk packages compromised by hinkley on Monday September 08, 2025 @03:58PM (#45173163)

Make it work, make it right, make it fast.

For security checks, the first 2 out of 3 is just fine.

[ Parent | on HN ]

Re:NPM debug and chalk packages compromised by Aeolun on Monday September 08, 2025 @05:35PM (#45174327)

Sure, but if you can get the last for free, why not?

[ Parent | on HN ]

Re:NPM debug and chalk packages compromised by nothrabannosir on Monday September 08, 2025 @04:56PM (#45173857)

But also respects .gitignore by default so I’m not sure you want to use ripgrep to scan your node_modules

[ Parent | on HN ]

Re:NPM debug and chalk packages compromised by Fishkins on Monday September 08, 2025 @05:09PM (#45174032)

For others who didn't know, the -u flag in the OP's command makes it so ripgrep _will_ search files even if they're gitignored

[ Parent | on HN ]

Re:NPM debug and chalk packages compromised by postalcoder on Tuesday September 09, 2025 @01:54AM (#45177926)

-u searches through ignored files

-uu searches through ignored and hidden files (eg dotfiles)

-uuu searches through ignored, hidden, and binary files (ie everything)

[ Parent | on HN ]

Re:NPM debug and chalk packages compromised by AkshatJ27 on Monday September 08, 2025 @05:12PM (#45174067)

Isn't the intended behaviour of original comment checking the node_modules folder for the "infected" string.

[ Parent | on HN ]