pull down to refresh

We Just Found Malicious Code in the Popular NPM Packagejdstaerk.substack.com/p/we-just-found-malicious-code-in-the
1497 sats \ 18 comments \ @kristapsk 8 Sep 2025 security
write
compose
related posts
31 sats \ 1 reply \ @m0wer 9 Sep 2025

Did the attacker manage to steal anything at all though? Doesn't seem to be the case from a few random addresses that I've checked from https://gist.github.com/jdstaerk/f845fbc1babad2b2c5af93916dd7e9fb

reply
32 sats \ 0 replies \ @Filiprogrammer 9 Sep 2025
reply
98 sats \ 3 replies \ @DarthCoin 8 Sep 2025

I lost all my BTC in a NPM package bug...

reply
21 sats \ 2 replies \ @Undisciplined 8 Sep 2025

Even the empty beer cans in your walls?

reply
31 sats \ 1 reply \ @DarthCoin 8 Sep 2025

those are offline, no internet signal there :)

reply
10 sats \ 0 replies \ @Undisciplined 8 Sep 2025

Thank goodness!

reply
10 sats \ 0 replies \ @2053456d48 9 Sep 2025

Wow! ...thanks for bringing that up.

reply
71 sats \ 1 reply \ @WeAreAllSatoshi 8 Sep 2025

Which package? Gah put it in the headline

reply
323 sats \ 0 replies \ @optimism 8 Sep 2025
reply
21 sats \ 3 replies \ @220522c2c4 8 Sep 2025

related: #1212953

reply
10 sats \ 2 replies \ @DarthCoin 8 Sep 2025

bots doesn't count. fuck the bots

reply
49 sats \ 1 reply \ @220522c2c4 8 Sep 2025

i'm sure people will be fucking bots soon

reply
10 sats \ 0 replies \ @DarthCoin 8 Sep 2025

they are already

reply
21 sats \ 0 replies \ @nkmg1c_ventures 8 Sep 2025

I accidentally double posted this :|

reply
21 sats \ 1 reply \ @kristapsk OP 8 Sep 2025
reply
10 sats \ 0 replies \ @nitter 8 Sep 2025
reply
20 sats \ 0 replies \ @gmd 8 Sep 2025

scary...

reply
10 sats \ 0 replies \ @DarthCoin 8 Sep 2025

reply