NPM debug and chalk packages compromised

Re:NPM debug and chalk packages compromised by justusthane on Monday September 08, 2025 @06:35PM (#45174994)

No, they are extremely well vetted. Have you ever heard of a supply chain attack involving Red Hat, Debian or Ubuntu repos?

[ Parent | on HN ]

Re:NPM debug and chalk packages compromised by jonquest on Monday September 08, 2025 @06:56PM (#45175191)

Yes, the XZ attack affected Fedora nightly and Debian testing and unstable. Yes, it got caught before it made it into a stable distribution (this time).

https://www.redhat.com/en/blog/understanding-red-hats-respon...

https://lists.debian.org/debian-security-announce/2024/msg00...

[ Parent | on HN ]

Re:NPM debug and chalk packages compromised by goodpoint on Tuesday September 09, 2025 @08:37AM (#45181120)

So the attack was successfully stopped and you complain about it?

[ Parent | on HN ]

Re:NPM debug and chalk packages compromised by jonquest on Tuesday September 09, 2025 @02:34PM (#45186470)

I’m not complaining, I’m pointing out facts. If the facts offend you, that’s your problem. Ignore them if you wish.

[ Parent | on HN ]