News for hackers. Stuff that matters.

A comment on NPM debug and chalk packages compromised. Parent comment

Re:NPM debug and chalk packages compromised by josephg on Monday September 08, 2025 @11:17PM (#45176986)
Apparently it found this attack more or less immediately.

It seems strange to attack a service like this right after it actively helped keep people safe from malware. I'm sure its not perfect, but it sounds like they deserve to take a victory lap.

[ Parent | on HN ]
Re:NPM debug and chalk packages compromised by hsbauauvhabzb on Tuesday September 09, 2025 @12:04AM (#45177254)
I don’t think celebrating a company who has a distinct interest in prolonging a problem while they profit off it is a good thing, no.
[ Parent | on HN ]
Re:NPM debug and chalk packages compromised by josephg on Tuesday September 09, 2025 @12:52AM (#45177555)
They're profiting off helping to solve the problem through early warning and detection. And by keeping their customers safe from stuff like this.

Seems good to me. I want more attention and more tooling around this problem. You seem mad at them for helping solve a real problem?

[ Parent | on HN ]