Back to article
datanexusmcp.com

September 2025 NPM Attack Hit 2.6B Weekly Downloads. Most Found Out on Twitter (opens in new tab)

Covers 2 stories See all stories this covers including The npm Threat Landscape: Attack Surface and MitigationsDiscussed on Hacker News

Feeds

✨ Discovered from this domain
The September 2025 npm Attack Hit 2.6 Billion Weekly Downloads. Most Teams Found Out from Twitter. datanexusmcp.com

chalk. debug. ansi-styles. strip-ansi. Packages in virtually every JavaScript project. Gone malicious for hours before most CI pipelines knew.

Keyboard Shortcuts

Navigation

Next / previous post
j/k
Open post
oorEnter
Preview post
v

Post Actions

Love post
a
Like post
l
Dislike post
d
Undo reaction
u
Save / unsave
s

Recommendations

Add interest / feed
Enter
Not interested
x

Go to

Home
gh
Interests
gi
Feeds
gf
Likes
gl
History
gy
Changelog
gc
Settings
gs
Discover
gb
Search
/

General

Show this help
?
Submit feedback
!
Close modal / unfocus
Esc

Press ? anytime to show this help