News for hackers. Stuff that matters.

A comment on NPM debug and chalk packages compromised. Parent comment

Re:NPM debug and chalk packages compromised by junon on Monday September 08, 2025 @03:25PM (#45172742)
That was the low-tech part of their attack, and was my fault - both for clicking on it and for my phrasing.

It wasn't a single-click attack, sorry for the confusion. I logged into their fake site with a TOTP code.

[ Parent | on HN ]
Re:NPM debug and chalk packages compromised by yard2010 on Monday September 08, 2025 @04:31PM (#45173563)
This is a clear example that this can happen to anyone.

Sorry for what you're going through.

[ Parent | on HN ]
Re:NPM debug and chalk packages compromised by SchemaLoad on Monday September 08, 2025 @11:10PM (#45176951)
This is why Passkeys are getting pushed right now. They make it physically impossible to sign in to a phishing site.
[ Parent | on HN ]