News for hackers. Stuff that matters.

A comment on NPM debug and chalk packages compromised. Parent comment

Re:NPM debug and chalk packages compromised by minitech on Tuesday September 09, 2025 @02:50AM (#45178386)
You can’t replace existing versions on npm. (But probably more important is what @jffry mentioned – yes, lockfiles include hashes.)
[ Parent | on HN ]

There are no comments on this comment yet.