News for hackers. Stuff that matters.

A comment on NPM debug and chalk packages compromised. Parent comment

Re:NPM debug and chalk packages compromised by nothrabannosir on Monday September 08, 2025 @04:56PM (#45173857)
But also respects .gitignore by default so I’m not sure you want to use ripgrep to scan your node_modules
[ Parent | on HN ]
Re:NPM debug and chalk packages compromised by Fishkins on Monday September 08, 2025 @05:09PM (#45174032)
For others who didn't know, the -u flag in the OP's command makes it so ripgrep _will_ search files even if they're gitignored
[ Parent | on HN ]
Re:NPM debug and chalk packages compromised by postalcoder on Tuesday September 09, 2025 @01:54AM (#45177926)
-u searches through ignored files

-uu searches through ignored and hidden files (eg dotfiles)

-uuu searches through ignored, hidden, and binary files (ie everything)

[ Parent | on HN ]
Re:NPM debug and chalk packages compromised by AkshatJ27 on Monday September 08, 2025 @05:12PM (#45174067)
Isn't the intended behaviour of original comment checking the node_modules folder for the "infected" string.
[ Parent | on HN ]