Hacker News
new
|
past
|
comments
|
ask
|
show
|
jobs
|
submit
login
mrguyorama
on Sept 8, 2025
|
parent
|
context
|
favorite
| on:
NPM debug and chalk packages compromised
Why would NPM do anything about it? NPM has been a great source of distributing malware for like a decade now, and none of you have stopped using it.
Why in the world would they NEED to stop? It apparently doesn't harm their "business"
pants2
on Sept 8, 2025
[–]
Dozens of businesses have been built to try fixing the npm security problem. There's clearly money in it, even if MS were to charge an access fee for security features.
Guidelines
|
FAQ
|
Lists
|
API
|
Security
|
Legal
|
Apply to YC
|
Contact
Search:
Why in the world would they NEED to stop? It apparently doesn't harm their "business"