News for hackers. Stuff that matters.

A comment on NPM debug and chalk packages compromised. Parent comment

Re:NPM debug and chalk packages compromised by koil on Monday September 08, 2025 @02:30PM (#45171987)
As OC mentioned elsewhere, it was a targeted TOTP proxy attack.
[ Parent | on HN ]
Re:NPM debug and chalk packages compromised by hughw on Monday September 08, 2025 @03:18PM (#45172637)
So, he clicked the link and then entered his correct TOTP? how would manually typing the url instead of clicking the link have mitigated this?
[ Parent | on HN ]
Re:NPM debug and chalk packages compromised by Mogzol on Monday September 08, 2025 @03:30PM (#45172796)
They wouldn't have manually typed the exact URL from the email, they would have just typed in npmjs.com which would ensure they ended up on the real NPM site. Or even if they did type out the exact URL from the email, it would have made them much more likely to notice that it was not the real NPM URL.
[ Parent | on HN ]