NPM Compromised

[dday9]

NPM packages have been compromised by a self-replicating worm known as Shai-Hulud: https://www.blackduck.com/blog/npm-m...ud-threat.html

Basically it gets credentials and then publishes infected packages as the authenticated (compromised) user.

[Shaggy Hiker]

If there is a vulnerability, it WILL be exploited...eventually.

[dday9]

I've moved this to General Developer forum. In hindsight, Chit-Chat was probably not the best location.

[Zvoni]

NPM packages have been compromised by a self-replicating worm known as Shai-Hulud: https://www.blackduck.com/blog/npm-m...ud-threat.html

Basically it gets credentials and then publishes infected packages as the authenticated (compromised) user.

So someone decided to "spice" it up?