Npm packages with over 1b weekly downloads, incl. Chalk, have been compromised.

Comments (7)

artooro · 4h ago

This looks pretty bad. Even if this only affects crypto wallets, I can't help but imagine how much worse this could be.

Another good read is at https://www.aikido.dev/blog/npm-debug-and-chalk-packages-com...

alaintno · 5h ago

How is it possible that this code (line 9 of the index.js) isn't present in the source github repo, but can be seen in the beta feature of npmjs.com?

Also, the package 1.3.3 has been downloaded 0 times according to npmjs.com, how can the writer of this article has been able to detect this and not increment the download counter?

DDerTyp · 4h ago

The discrepancy comes from how npm packages are published. What you see on GitHub is whatever the maintainer pushed to the repo, but what actually gets published to the npm registry doesn’t have to match the GitHub source. A maintainer (or someone with access) can publish a tarball that includes additional or modified files, even if those changes never appear in the GitHub repo. That’s why the obfuscated code shows up when inspecting the package on npmjs.com.

As for the “0 downloads” count: npm’s stats are not real-time. There’s usually a delay before download numbers update, and in some cases the beta UI shows incomplete data. Our pipeline picked up the malicious version because npm install resolved to it based on semver rules, even before the download stats reflected it. Running the build locally reproduced the same issue, which is how we detected it without necessarily incrementing the public counter immediately.

alaintno · 4h ago

I see, thanks for the explanations, and thanks for warning us about this!

Jenk · 4h ago

It can also be that the repo was modified after a release.

DDerTyp · 3h ago

It looks like a lot of packages of the author have been compromised (in total over 1 billion downloads). I've updated the title an added information to the blog post.

DDerTyp · 4h ago

Update: It seems like all packages of the author got hacked.

Google Meet Outage

Ask HN: I can't remember the name of a AI CLI tool I saw a few weeks ago

Not caring enough about money?

Ask HN: How to take notes and learn from them?

Claude Code fails to fetch or create the GPL v3.0 license when asked

Ask HN: Looking for headless CMS recommendation

Ask HN: Good resources for DIY-ish animatronic kits for Halloween?

Ask HN: How much can we trust open-source projects or our hardware?

Ask HN: Who wants to be hired? (September 2025)

Ask HN: Who is hiring? (September 2025)

Ask HN: How to avoid passive use of AI?

Ask HN: Can an amateur make contributions to pure math or theoretical physics?

Raku.org Chooses Htmx

Ask HN: Are api.nasa.gov, data.nasa.gov down or shutdown?

Why the Technological Singularity May Be a "Big Nothing"

Ask HN: Significant reduction in AI related submissions?

Automated Workday check in/check out and Microsoft Teams messages monitoring

Ask HN: Is Reddit going the way of Stack Overflow?

If AI agents take the jobs, who buys the stuff?

Ask HN: Why does Google word privacy settings like you agree even when off?

Ask HN: What do you think of the new Digg?

Ask HN: Moving from Dev to PM

Ask HN: Is your company still hiring junior engineers?

New Member Alert

Ask HN: How long did it take you to learn Git?

Tell HN: My advice after I applied to 450 positions before getting hired

Ask HN: LLM struggles to center div too?

Ask HN: Useful AI applications in regular businesses?

Ask HN: Why do LLMs struggle with word count?

A16Z scouting ambitious Swiss founders for $1M accelerator

ASIC: Proof-of-Concept Binary Optimizer Reduces Size, More to Come

Ask HN: How do you fight YouTube addiction and procrastination? I'm struggling

Ask HN: When was the last time you visited Stack Overflow?

Ask HN: VSCode AI Autocomplete Woes

Npm packages with over 1b weekly downloads, incl. Chalk, have been compromised.

Comments (7)