4 ms·

Maintainer phished. Was caught quickly (hours? hard to be sure, the versions have been removed/overwritten). Attacker owns npmjs.help domain.

• DDerTyp 1y ago
  Noticed that after ten mins, contacted author immediatly and he seems to be working on it / restoring his account / removing malware on published packages. Kinda "proud" on it haha :D
  • jbverschoor 1y ago
    Doesn’t npmjs do things like signing, pinning, and yanking packages, like rubygems?
    • paulddraper 1y ago
      Yes