News for hackers. Stuff that matters.

A comment on Self Propagating NPM Malware Compromises over 40 Packages. Parent comment

Re:Self Propagating NPM Malware Compromises over 40 Packages by yawaramin on Tuesday September 16, 2025 @11:28PM (#45271294)
Except that htmx's recommended usage is as a single <script> injected directly into your HTML page, not as an npm dependency. So unless you are an htmx contributor you are not going to be installing the dev dependencies.
[ Parent | on HN ]
Re:Self Propagating NPM Malware Compromises over 40 Packages by jddj on Saturday September 20, 2025 @05:39AM (#45311821)
That script still gets built somewhere using those deps
[ Parent | on HN ]