Npm packages with over 1b weekly downloads, incl. Chalk, have been compromised.

[dang]

Comments moved to https://news.ycombinator.com/item?id=45169657.