News for hackers. Stuff that matters.
Re:NPM debug and chalk packages compromised by hunter2_ on Monday September 08, 2025 @03:14PM (#45172585)
I agree: any of the potential indicators of phishing (whether it's poor presentation, incorrect grammar, tight deadlines, unusual "from" addresses, unusual domains in links, etc.) can easily have false positives which unfortunately dull people's senses. That doesn't mean they can't continue to be promulgated as indicators of possible (not definite) phishing, though.

I used the word "often" rather than "always" for this reason.

There are no comments on this comment yet.