News for hackers. Stuff that matters.

sflanagain

Re:NPM debug and chalk packages compromised on Monday September 08, 2025 @04:05PM (#45173246)
The phishing email comes across a bit too amateur. Specifically the inclusion of:

"we kindly ask that you complete this update your earliest convenience".

The email was included here: https://cdn.prod.website-files.com/642adcaf364024654c71df23/...

From this article: https://www.aikido.dev/blog/npm-debug-and-chalk-packages-com...