News for hackers. Stuff that matters.
Re:NPM debug and chalk packages compromised by dbdr on Monday September 08, 2025 @03:22PM (#45172699)
Next comment:

> Those are swap contract addresses, not attacker addresses. E.g. 0x66a9893cC07D91D95644AEDD05D03f95e1dBA8Af the Uniswap v4 universal router addr.

> Every indication so far is that the attacker stole $0 from all of this. Which is a best-case outcome.

Re:NPM debug and chalk packages compromised by FergusArgyll on Monday September 08, 2025 @03:25PM (#45172741)
Oh, that makes much more sense - thanks!