That's not... how that works, unless you clicked through a very loud, obvious TL... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

		nixosbestos 60 days ago \| parent \| context \| favorite \| on: NPM debug and chalk packages compromised That's not... how that works, unless you clicked through a very loud, obvious TLS warning.

jowea 60 days ago [–]

Yeah that sounds weird. Certificate pinning and HSTS should protect from that, right?

Consider applying for YC's Winter 2026 batch! Applications are open till Nov 10
Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact