greatestdevever··on NPM debug and chalk packages compromisedHey, new dev here. Sorry if this is a common knowledge and I am asking a stupid question. How does you getting phished affect these NPM packages? aren't these handled by NPM or the developers of them?
greatestdevever··on NPM debug and chalk packages compromisedinsanely well-crafted. i mean, it's something bad that happened but one must recognise the wit of this attack.
greatestdevever··on NPM debug and chalk packages compromisedHow I do it is, run npm list --all then check the completely dependency tree to find out if anywhere I am using the vulnerable package.
greatestdevever··on NPM debug and chalk packages compromisedI can not find the package anymore. I think someone did it already.