News for hackers. Stuff that matters.

A comment on NPM debug and chalk packages compromised. Parent comment

Re:NPM debug and chalk packages compromised by junon on Tuesday September 09, 2025 @04:50AM (#45179336)
No, anything that connects to npm as an authoritative source for packages. Yarn, pnpm, and npm clients all do.
[ Parent | on HN ]

There are no comments on this comment yet.