News for hackers. Stuff that matters.

A comment on NPM debug and chalk packages compromised. Parent comment

Re:NPM debug and chalk packages compromised by internetter on Monday September 08, 2025 @03:08PM (#45172493)
in general npm does a not-too-great job with these things
[ Parent | on HN ]
Re:NPM debug and chalk packages compromised by tripplyons on Monday September 08, 2025 @03:38PM (#45172894)
Remember, NPM stands for Now Part of Microsoft!

(Microsoft owns GitHub, which owns NPM.)

[ Parent | on HN ]
Re:NPM debug and chalk packages compromised by thayne on Monday September 08, 2025 @05:24PM (#45174195)
Which means they don't have the excuse of being a volunteer effort to not be on top of this. MS has plenty of resources.
[ Parent | on HN ]
Re:NPM debug and chalk packages compromised by dabockster on Monday September 08, 2025 @08:16PM (#45175839)
If you're running this kind of infrastructure online these days, you have every right to require payment somehow. Don't work for free.
[ Parent | on HN ]