Skip to content
The Nexus
DossierENTITY

Chalk

Coverage of Chalk in the Nexus archive.

Earliest in view: May 18 · 22:07 UTCMost recent: May 18 · 22:07 UTC
Co-mentioned in this coverage
Shai-Huludtopic1npmorganization1GitHuborganization1TeamPCPorganization1Ox security researchersorganization1Moshe Siman Tov Bustanperson1
Recent coverage
  • SECURITYMay 18 · 22:07 UTCTHE REGISTER
    Shai-Hulud copycat worm infects yet another npm package

    A Shai-Hulud copycat worm has been found in another npm package, chalk-tempalte, which is a malicious extension of the popular JavaScript library Chalk. The poisoned package contains a clone of Shai-Hulud, which steals secrets and sends them to a remote server. Four malicious packages have been detected, with a total of 2,678 weekly downloads.