2 ms·
NPM package 'debug' v4.4.2 contains malware
- q3k 1y agoGH issue: https://github.com/debug-js/debug/issues/1005 https://github.com/debug-js/debug/issues/1005
- dylmye 1y agoThe two listed collaborators of the debug package have over 700 packages published collectively, many of them with millions of weekly downloads. What could possibly go wrong when their token is compromised?
- ChrisArchitect 1y agoA blog post: https://www.aikido.dev/blog/npm-debug-and-chalk-packages-compromised https://www.aikido.dev/blog/npm-debug-and-chalk-packages-com... (https://news.ycombinator.com/item?id=45169657 https://news.ycombinator.com/item?id=45169657)
- davely 1y agoMore and more, I am thinking all my local development environments for Node / JavaScript projects need to be setup in a sandboxed VM.
- TheUnhinged 1y agois-arrayish lmao