News for hackers. Stuff that matters.

A comment on NPM debug and chalk packages compromised. Parent comment

Re:NPM debug and chalk packages compromised by svendroevskaeg on Tuesday September 09, 2025 @03:10AM (#45178543)
So by "Just NPM is affected" does that mean yarn is unaffected?
[ Parent | on HN ]
Re:NPM debug and chalk packages compromised by junon on Tuesday September 09, 2025 @04:50AM (#45179336)
No, anything that connects to npm as an authoritative source for packages. Yarn, pnpm, and npm clients all do.
[ Parent | on HN ]