That was the low-tech part of their attack, and was my fault - both for clicking... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

		junon 8 months ago \| parent \| context \| favorite \| on: NPM debug and chalk packages compromised That was the low-tech part of their attack, and was my fault - both for clicking on it and for my phrasing. It wasn't a single-click attack, sorry for the confusion. I logged into their fake site with a TOTP code.

yard2010 8 months ago [–]

This is a clear example that this can happen to anyone.

Sorry for what you're going through.

SchemaLoad 8 months ago | [–]

This is why Passkeys are getting pushed right now. They make it physically impossible to sign in to a phishing site.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact