New best story on Hacker News: Shai-Hulud malware attack: Tinycolor and over 40 NPM packages compromised

Shai-Hulud malware attack: Tinycolor and over 40 NPM packages compromised
1106 by jamesberthoty | 910 comments on
A lot of blogs on this are AI generated and such as this is developing, so just linking to a bunch of resources out there: Socket: - Sep 15 (First post on breach): https://socket.dev/blog/tinycolor-supply-chain-attack-affect... - Sep 16: https://socket.dev/blog/ongoing-supply-chain-attack-targets-... StepSecurity – https://ift.tt/D0TYhej... Aikido - https://ift.tt/R2A0duz... Ox - https://ift.tt/J1LyWRV... Safety - https://ift.tt/S96O5nx Phoenix - https://ift.tt/KJ8ZoYR Semgrep - https://ift.tt/0mxY5gS...