News for hackers. Stuff that matters.

A comment on NPM debug and chalk packages compromised. Parent comment

Re:NPM debug and chalk packages compromised by niwtsol on Monday September 08, 2025 @01:48PM (#45171417)
The email says accounts will start locking Sept 10th and it was sent Sept 8th - so a 48 hour urgency window or an account would be locked is urgency IMO
[ Parent | on HN ]
Re:NPM debug and chalk packages compromised by notmyjob on Monday September 08, 2025 @01:53PM (#45171501)
Fair enough, was just thinking about many low effort scams that have “EMERGENCY!!! ACT NOW!!!” in red boldface. This, by being slightly? less aggressive is actually less likely to trip my “this is phishing” detector. Obviously ymmv.
[ Parent | on HN ]