Re:NPM debug and chalk packages compromised
by hunter2_ on Monday September 08, 2025 @03:14PM
(#45172585)
I agree: any of the potential indicators of phishing (whether it's poor presentation, incorrect grammar, tight deadlines, unusual "from" addresses, unusual domains in links, etc.) can easily have false positives which unfortunately dull people's senses. That doesn't mean they can't continue to be promulgated as indicators of possible (not definite) phishing, though.
I used the word "often" rather than "always" for this reason.
I used the word "often" rather than "always" for this reason.