Attackers hijacked popular NPM packages to replace crypto wallet addresses (opens in new tab)

(exaforce.com)

1 pointsnorthstar7026mo ago2 comments

2 comments

Big discussion yesterday (1280 points, 703 comments) https://news.ycombinator.com/item?id=45169657

On September 8, 2025, NPM reported that several libraries were compromised in a user-side man-in-the-middle attack. This research dives into the details about how the attack works.

j / k navigate · click thread line to collapse

2 comments

gnabgib6mo ago

Big discussion yesterday (1280 points, 703 comments) https://news.ycombinator.com/item?id=45169657

northstar702OP6mo ago

On September 8, 2025, NPM reported that several libraries were compromised in a user-side man-in-the-middle attack. This research dives into the details about how the attack works.

j / k navigate · click thread line to collapse