News for hackers. Stuff that matters.

A comment on NPM debug and chalk packages compromised. Parent comment

Re:NPM debug and chalk packages compromised by g42gregory on Monday September 08, 2025 @09:32PM (#45176355)
I am not very sophisticated npm user on MacOS, but I installed bunch of packages for Claude Code development. How do we check if computer has a problem?

Do we just run:

npm list -g #for global installs

npm list #for local installs

And check if any packages appear that are on the above list?

Thanks!

[ Parent | on HN ]
Re:NPM debug and chalk packages compromised by greatestdevever on Wednesday September 10, 2025 @03:28AM (#45194396)
How I do it is, run npm list --all then check the completely dependency tree to find out if anywhere I am using the vulnerable package.
[ Parent | on HN ]