Get the latest tech news

NPM debug and chalk packages compromised


The popular packages debug and chalk on npm have been compromised with malicious code

Aikido's IDE plugin can detect vulnerable code, and AutoTriage can help you ro priotiize what to fix Aikido for Education offers students hands-on cybersecurity training with real-world security tools, free for all educators. Aikido for Education offers students hands-on cybersecurity training with real-world security tools, free for all educators.

Get the Android app

Or read this on Hacker News

Read more on:

Photo of npm

npm

Photo of debug

debug

Photo of chalk packages

chalk packages

Related news:

News photo

Rampant emoji use suggests crypto-stealing NPM package was written by AI

News photo

Not pretty, not Windows-only: npm phishing attack laces popular packages with malware

News photo

NPM package ‘is’ with 2.8M weekly downloads infected devs with malware