News for hackers. Stuff that matters.

A comment on You too can run malware from NPM (I mean without consequences). Parent comment

Re:You too can run malware from NPM (I mean without conseque... by nodesocket on Tuesday September 09, 2025 @08:03AM (#45180767)
Or at a minimum support yubikey for 2fa.
[ Parent | on HN ]
Re:You too can run malware from NPM (I mean without conseque... by worthless-trash on Tuesday September 09, 2025 @08:19AM (#45180944)
Original author could be evil. 2fa does nothing.
[ Parent | on HN ]
Re:You too can run malware from NPM (I mean without conseque... by jamesnorden on Tuesday September 09, 2025 @10:33AM (#45182502)
If my grandma had wheels she'd be a bike. You don't need to attack the problem from only one angle.
[ Parent | on HN ]
Re:You too can run malware from NPM (I mean without conseque... by worthless-trash on Tuesday September 09, 2025 @10:43AM (#45182626)
Your grandma is a bike then. The 2fa is going to solve nothing and any attacker worth their salt knows it.
[ Parent | on HN ]
Re:You too can run malware from NPM (I mean without conseque... by singulasar on Tuesday September 09, 2025 @01:22PM (#45185239)
unphishable 2fa would have prevented this specific case tho... what are you talking about?
[ Parent | on HN ]
Re:You too can run malware from NPM (I mean without conseque... by mcintyre1994 on Tuesday September 09, 2025 @10:34AM (#45182516)
They do, I use a yubikey and it requires me to authenticate with it whenever I publish. They do support weaker 2fa methods as well, but you can choose.
[ Parent | on HN ]