That's not... how that works, unless you clicked through a very loud, obvious TL... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

nixosbestos on Sept 8, 2025 | parent | context | favorite | on: NPM debug and chalk packages compromised

That's not... how that works, unless you clicked through a very loud, obvious TLS warning.

jowea on Sept 8, 2025 [–]

Yeah that sounds weird. Certificate pinning and HSTS should protect from that, right?

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact