News for hackers. Stuff that matters.

A comment on NPM debug and chalk packages compromised. Parent comment

Re:NPM debug and chalk packages compromised by ksdnjweusdnkl21 on Monday September 08, 2025 @01:44PM (#45171362)
TOTP isnt designed to be against phishing. Its against weak, leaked or cracked passwords.
[ Parent | on HN ]
Re:NPM debug and chalk packages compromised by Scoundreller on Monday September 08, 2025 @02:27PM (#45171950)
Lots of junk TOTP apps in app stores.

Once heard of a user putting in a helpdesk ticket asking why they had to pay for the TOTP app. Then I realize their TOTP seed is probably out in the open now.

I’m sure we can imagine how else this could go badly…

[ Parent | on HN ]