Danny, the Cyber Guy on Nostr: heads up to whoever runs nostr.watch: your javascript is compromised by an attacker. ...
heads up to whoever runs nostr.watch: your javascript is compromised by an attacker. I don't have the sourcemap so it's hard to say exactly what node module is the compromised one, but your website sends data, and redirects users to: xyz[dot]ngrok[dot]pro. this is a phishing
#devstr
Published at
2026-07-09 13:46:22 UTCEvent JSON
{
"id": "3cfdf5aa535c68f6351673d5735b54ac07da05d1ba78fe9a6d02823383713d0c",
"pubkey": "66675158e6338fe89fda418e42a0bf2a7a2b132504dd347f015a18971b644430",
"created_at": 1783604782,
"kind": 1,
"tags": [
[
"t",
"devstr"
],
[
"client",
"Ditto",
"31990:781a1527055f74c1f70230f10384609b34548f8ab6a0a6caa74025827f9fdae5:ditto"
]
],
"content": "heads up to whoever runs nostr.watch: your javascript is compromised by an attacker. I don't have the sourcemap so it's hard to say exactly what node module is the compromised one, but your website sends data, and redirects users to: xyz[dot]ngrok[dot]pro. this is a phishing\n\n#devstr",
"sig": "a0a8f5c9cd10785ff764804e2786fa290faa02964c0cdc56bedfbabfad1cf21f0ab7bbdc354e68b5d04458b629de8bbf8c91b773fc8eb32ca64eb19f56692c95"
}
