News for hackers. Stuff that matters.
Re:NPM debug and chalk packages compromised by veber-alex on Monday September 08, 2025 @05:40PM (#45174383)
Fake site.

You login with your credentials, the attacker logins to the real site.

You get an SMS with a one time code from the real site and input it to the fake site.

The attacker takes the code andc finishes the login to the real site.

There are no comments on this comment yet.