HN Explorer

Unpkg.com hacked?

20 points by benaiah ↗ HN
I've checked on both my local machine and on a VPS I run, and the following URL is 302 redirecting to a malicious JS script which pops up a confirmation window and then redirects to ads:

SOURCE URL: https://unpkg.com/react@latest/dist/react.js MALICIOUS REDIRECT: https://compliance-jessica.xyz/a.php

This is the URL recommended for in-browser development use by https://facebook.github.io/react/docs/installation.html

Can anyone else replicate this?

17 comments

[ 4.9 ms ] story [ 46.1 ms ] thread
davidkhess
Seeing the same thing when trying to load Vue.

Tweet from them:

https://twitter.com/unpkg/status/852655106562564098

> We're experiencing some issues and working on it. Will post updates here as soon as we know more.

murftown
Yes, I experienced the same thing.
svdpeijl
here too - same thing.. this is ridiculous what a HUGE blunder on unpkg.com part
NuclearFishin
Looks like there was indeed an issue with a bad nameserver update:

https://twitter.com/unpkg/status/852660203275276289

[dead] trishtrish691
Contact thewhitehathacker2012@gmail.com for all you hacking jobs and if you suspect any unfaithfulness from your spouse or girlfriend , he is the best you can get just tell him you saw a post from Trishia or else he might not reply +15134003546
[deleted]
(comment deleted)
Erd0s6
I was having this issue to but all good now. Should I be concerned about my computer being infected from this? Virus scans don't find anything
himlion
Use subresource integrity and this would have affected you less. Still a non functioning site unfortunately.
CorySimmons
We got close to trending on HackerNews yesterday when this happened.

Suddenly every visitor was reporting alert dialogs saying they had a virus and our votes dropped off a cliff.

Last time I ever go against my gut and semi-trust anything.

[dead] trishtrish691
Contact thewhitehathacker2012@gmail.com for all you hacking jobs and if you suspect any unfaithfulness from your spouse or girlfriend , he is the best you can get just tell him you saw a post from Trishia or else he might not reply +15134003546
[dead] trishtrish691
Contact thewhitehathacker2012@gmail.com for all you hacking jobs and if you suspect any unfaithfulness from your spouse or girlfriend , he is the best you can get just tell him you saw a post from Trishia or else he might not reply +15134003546