Created
September 8, 2025 16:36
-
-
Save Qix-/c1f0d4f0d359dffaeec48dbfa1d40ee9 to your computer and use it in GitHub Desktop.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Return-Path: <ndr-cbbfcb00-8c4d-11f0-0040-f184d6629049@mt86.npmjs.help> | |
| Delivered-To: josh+npm@junon.me | |
| Received: from mp0.migadu.com ([2001:41d0:403:58f0::]) | |
| (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) | |
| by ms5.migadu.com with LMTPS | |
| id UGArBvdtvmimfwAAqHPOHw:P1 | |
| (envelope-from <ndr-cbbfcb00-8c4d-11f0-0040-f184d6629049@mt86.npmjs.help>) | |
| for <josh+npm@junon.me>; Mon, 08 Sep 2025 07:47:35 +0200 | |
| Received: from aspmx1.migadu.com ([2001:41d0:403:58f0::]) | |
| (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) | |
| by mp0.migadu.com with LMTPS | |
| id UGArBvdtvmimfwAAqHPOHw | |
| (envelope-from <ndr-cbbfcb00-8c4d-11f0-0040-f184d6629049@mt86.npmjs.help>) | |
| for <josh+npm@junon.me>; Mon, 08 Sep 2025 07:47:35 +0200 | |
| X-Envelope-To: npm@josh.junon.me | |
| Authentication-Results: aspmx1.migadu.com; | |
| dkim=pass header.d=smtp.mailtrap.live header.s=rwmt1 header.b=Wrv0sR0r; | |
| dkim=pass header.d=npmjs.help header.s=rwmt1 header.b=opuoQW+P; | |
| spf=pass (aspmx1.migadu.com: domain of ndr-cbbfcb00-8c4d-11f0-0040-f184d6629049@mt86.npmjs.help designates 45.158.83.7 as permitted sender) smtp.mailfrom=ndr-cbbfcb00-8c4d-11f0-0040-f184d6629049@mt86.npmjs.help; | |
| dmarc=pass (policy=none) header.from=npmjs.help | |
| ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=junon.me; | |
| s=key1; t=1757310450; | |
| h=from:from:reply-to:subject:subject:date:date:message-id:message-id: | |
| to:to:cc:mime-version:mime-version:content-type:content-type: | |
| content-transfer-encoding:content-transfer-encoding:dkim-signature; | |
| bh=XwL2/25ynaV8dSwcjy9r4wLYl50GEemanrL7D/Es5HE=; | |
| b=G9UPIDWuoqEF8QuiT7NPZyQJlR5B74cufJ8FL+/B5zVHzW9LxlSJ3/fm/g+ZhTv4OheX+L | |
| iRMi+vBPEREA2fFMJPFgj3Lo+wd17k508vRe9UfgzQUnvgL/V3m8QB+KWGfOeD44pDrYbw | |
| NhDGL/xvqEL81Om7v+6WImpE96gcyiEmeT+8OLBACzCMtpjPsGRzCJ0HCtsFh3xCpMp/Os | |
| +eSDswA0oRchLt8h6ZhMX9vpa3d85fW7zrCzTZCF3puAfmktWUSlc+TbBVJODXKFb1WiG5 | |
| 8ixPVpTJKzoyg5C/f4zeawM8llniXZsAKRqj0OWzvfwbOByywjV9gKvaKM6VJQ== | |
| ARC-Seal: i=1; s=key1; d=junon.me; t=1757310450; a=rsa-sha256; cv=none; | |
| b=QHhak92XWPhQ+G+KRoQbF1z2jqdrqQQz9l6y13hXUSAKMu9kWQKVAi3KkFbda7rWezUPkm | |
| nPiroFUBbt4GzQz61EuO3lzT4g/RT0KK7fuT8MpdezyLQok3tCQ0e+Gi2D6qTPQbryQYcz | |
| bh5CpkZeb+wjfmTZ4ISamrWg3/sErL34BvkR4kyjd+BUJxOtw93ETsgH4iNntC9+NSb+p0 | |
| EEAXE6SkJLPQgD89M1B0esqi0aQbQQUOOfDjXrGen9m0vLdyvkfkGrrmGby1DurCM3+2E6 | |
| 5nqBZRfab4zPV1uxG8meY2la3GQVPMm1pZbm+MwqB1l5cIR0d3JluOdO01xAaQ== | |
| ARC-Authentication-Results: i=1; | |
| aspmx1.migadu.com; | |
| dkim=pass header.d=smtp.mailtrap.live header.s=rwmt1 header.b=Wrv0sR0r; | |
| dkim=pass header.d=npmjs.help header.s=rwmt1 header.b=opuoQW+P; | |
| spf=pass (aspmx1.migadu.com: domain of ndr-cbbfcb00-8c4d-11f0-0040-f184d6629049@mt86.npmjs.help designates 45.158.83.7 as permitted sender) smtp.mailfrom=ndr-cbbfcb00-8c4d-11f0-0040-f184d6629049@mt86.npmjs.help; | |
| dmarc=pass (policy=none) header.from=npmjs.help | |
| Received: from smtp-83-7.mailtrap.live (smtp-83-7.mailtrap.live [45.158.83.7]) | |
| (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) | |
| key-exchange x25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) | |
| (No client certificate requested) | |
| by aspmx1.migadu.com (Postfix) with ESMTPS id 547887F2DD | |
| for <npm@josh.junon.me>; Mon, 08 Sep 2025 07:47:30 +0200 (CEST) | |
| DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; x=1757638220; | |
| d=smtp.mailtrap.live; s=rwmt1; | |
| h=content-transfer-encoding:content-type:to:subject:from:date:mime-version: | |
| message-id:feedback-id:cfbl-address:from; | |
| bh=XwL2/25ynaV8dSwcjy9r4wLYl50GEemanrL7D/Es5HE=; | |
| b=Wrv0sR0rWsW/T6iRxYWi0N/LvzNblhXm2A67pHKQ+2UKX48f1GowjBgBA74m9Pc9Ej2QCynuL8xxZ | |
| 3kBpzyYUeEq/KNQpcBTpHHf5G/tfhaq5NpESvf1f/tEo09AwPPUJ+APQ9JpR1drU11NqS0Noov4qUv | |
| 1FrCHPosgucxLP/t3fiS6+2N2Mvx+y0EBRaNNtuFh3JhDXIDRkPa2VoIJpge2nvn6kSbfDm7fiDq2U | |
| FdruUZJ9B5yE7mFORWBN3rYqi4SOd4VVcQAQS0ULGC5V0qdpcS4ad2qoYKZ3buivDNGwxStMQONGnS | |
| LYN29n8e5Qesaim9q52rrk3rVWbAdBA== | |
| DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; x=1757638220; | |
| d=npmjs.help; s=rwmt1; | |
| h=content-transfer-encoding:content-type:to:subject:from:date:mime-version: | |
| message-id:feedback-id:cfbl-address:from; | |
| bh=XwL2/25ynaV8dSwcjy9r4wLYl50GEemanrL7D/Es5HE=; | |
| b=opuoQW+PyDGuj+gbqJAIyebLpOz5UplynxsMgFG8I2Ti0+JQ6MWCXgjT76sLNNB9aLL/iF9oe9wza | |
| W3wsGX3anqsGTGVeNl4SnP9Bu7CG/fLgVrrg02KSnBU+shrMzTehaVVlhbLV75rds0jbfYLRktbJyz | |
| ZT1O38JjQgy5Fa7TPE9xzLctlOWeitXuOyvE4Tqjb8ScClXojk4o2PLH7b/7AMnzIpYS1aVmZmWkf0 | |
| owWBdcCBWQDk77we0ZHiB2eG9BcyX0XGfrhotiq9qq4Q++2ThndLdgISgcSKq5YLdRvSNKaEaSFbuG | |
| MvrQ//6DSrljlNPvRUPkIi2rlrKwH7Q== | |
| CFBL-Address: fbl@smtp.mailtrap.live; report=arf | |
| X-Report-Abuse-To: abuse@mailtrap.io | |
| Received: from npmjs.help by smtp.mailtrap.live with ESMTPSA | |
| cbbfbe27-8c4d-11f0-87cb-0e939677d2a1; Mon, Sep 08 2025 00:50:20 GMT | |
| Feedback-ID: ss:770486:transactional:mailtrap.io | |
| Message-ID: <cbbfcb00-8c4d-11f0-0040-f184d6629049@npmjs.help> | |
| X-Mt-Data: ImwaaA1eEsIJO8j3geqydX3tabRv_puwRmOYE_hSvmds.86reC_Mrpzhi8GT0w17Ytk.sxIYgvW8Y4JsLEQM_SOAlBmewoJhl_kjmc7Xsfe6H7jWn1Jibakr_Lr9WeAENZtUonYL2MfTfoolumTOn77PmaX.oEK5ScEEKs1FUzLWhZIj4Fc9RxabIiwtGCqjkYj4sPAYIxiDv57BZg_sipKUd3SIwH7s.iV3OoSIxdA~--bLXuC5RaIxSw8UJk--P4_1265F0gEWZ3omCxhiBw~~ | |
| MIME-Version: 1.0 | |
| Date: Mon, 08 Sep 2025 00:50:20 +0000 | |
| From: "npm" <support@npmjs.help> | |
| Subject: Two-Factor Authentication Update Required | |
| To: "qix" <npm@josh.junon.me> | |
| Content-Type: text/html; charset=UTF-8 | |
| Content-Transfer-Encoding: quoted-printable | |
| X-Migadu-Flow: FLOW_IN | |
| X-Migadu-Country: US | |
| X-Migadu-Scanner: mx11.migadu.com | |
| X-Migadu-Spam-Score: 0.37 | |
| X-Spam-Score: 0.37 | |
| X-Migadu-Queue-Id: 547887F2DD | |
| <!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.= | |
| w3.org/TR/html4/loose.dtd"> | |
| <html lang=3D"en"> | |
| <head> | |
| <meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3DUS-AS= | |
| CII"> | |
| <title>Security Notice: Two-Factor Authentication Update Required</titl= | |
| e> | |
| </head> | |
| <body topmargin=3D"0" leftmargin=3D"0" marginheight=3D"0" marginwidth=3D"= | |
| 0" style=3D'width: 100% !important; min-width: 100%; -webkit-text-size-adju= | |
| st: 100%; -ms-text-size-adjust: 100%; color: #222222; font-family: "Helveti= | |
| ca", "Arial", sans-serif; font-weight: normal; text-align: left; line-heigh= | |
| t: 19px; font-size: 14px; background-color: #fafafa; margin: 0; padding: 0;= | |
| ' bgcolor=3D"#fafafa"> | |
| <table class=3D"body" style=3D'border-spacing: 0; border-collapse: coll= | |
| apse; vertical-align: top; text-align: left; height: 100%; width: 100%; col= | |
| or: #222222; font-family: "Helvetica", "Arial", sans-serif; font-weight: no= | |
| rmal; line-height: 19px; font-size: 14px; background-color: #fafafa; margin= | |
| : 0; padding: 10px;' bgcolor=3D"#fafafa"> | |
| <tr style=3D"vertical-align: top; text-align: left; padding: 0;" alig= | |
| n=3D"left"> | |
| <td class=3D"center" align=3D"center" valign=3D"top" style=3D'word-= | |
| break: break-word; -webkit-hyphens: auto; -moz-hyphens: auto; hyphens: auto= | |
| ; border-collapse: collapse !important; vertical-align: top; text-align: ce= | |
| nter; color: #222222; font-family: "Helvetica", "Arial", sans-serif; font-w= | |
| eight: normal; line-height: 19px; font-size: 14px; margin: 0; padding: 0;'> | |
| <center style=3D"width: 100%; min-width: 580px;"> | |
| <table class=3D"container" style=3D"border-spacing: 0; border-c= | |
| ollapse: collapse; vertical-align: top; text-align: inherit; width: 580px; = | |
| margin: 0 auto; padding: 0;"> | |
| <tr style=3D"vertical-align: top; text-align: left; padding: = | |
| 0;" align=3D"left"> | |
| <td style=3D'word-break: break-word; -webkit-hyphens: auto;= | |
| -moz-hyphens: auto; hyphens: auto; border-collapse: collapse !important; v= | |
| ertical-align: top; text-align: left; color: #222222; font-family: "Helveti= | |
| ca", "Arial", sans-serif; font-weight: normal; line-height: 19px; font-size= | |
| : 14px; margin: 0; padding: 0;' align=3D"left" valign=3D"top"> | |
| <table class=3D"email-header" style=3D"border-spacing: 0;= | |
| border-collapse: collapse; vertical-align: top; text-align: left; margin-t= | |
| op: 20px; width: 100%; padding: 0;"> | |
| <tr style=3D"vertical-align: top; text-align: left; pad= | |
| ding: 0;" align=3D"left"> | |
| <td class=3D"center" align=3D"center" style=3D'word-b= | |
| reak: break-word; -webkit-hyphens: auto; -moz-hyphens: auto; hyphens: auto;= | |
| border-collapse: collapse !important; vertical-align: top; text-align: cen= | |
| ter; color: #222222; font-family: "Helvetica", "Arial", sans-serif; font-we= | |
| ight: normal; line-height: 19px; font-size: 14px; margin: 0; padding: 0;' v= | |
| align=3D"top"> | |
| <center style=3D"width: 100%; min-width: 580px;"> | |
| <div class=3D"npm-mark" style=3D"margin-top: 20px= | |
| ; margin-bottom: 30px; text-align: center !important;" align=3D"center"> | |
| <img src=3D"data:image/png;base64,iVBORw0KGgoAA= | |
| AANSUhEUgAAABAAAAAQCAYAAAAf8/9hAAAAAklEQVR4AewaftIAAACdSURBVKXBsQmDQBSA4d/H= | |
| pYikEhsXSGN3bWoHEW4w9/A2EBwgVTqbcIWFjYLJgWmEoPC+L+lgRUFQMmxMlpFayxlT37OEQGT= | |
| YpNZyb1vOeFYVo/dEgpLhwKuuiW6PB7lz7BkOvJuGn9w59gQlQUlQEpQEJUEp6WDly2QZqbXsjd= | |
| 4TXYqCa1kSTX3PEgKRYbOEwOg9/8zDwDwM7AlKHyBvKXEhUyOHAAAAAElFTkSuQmCC" width= | |
| =3D"50" height=3D"50" style=3D"image-rendering: crisp-edges;width: 50px; ma= | |
| x-width: 50px; float: none; clear: both; display: block; height: 50px; max-= | |
| height: 50px; margin: 0 auto;" align=3D"none"> | |
| </div> | |
| </center> | |
| </td> | |
| <td class=3D"expander" style=3D'word-break: break-wor= | |
| d; -webkit-hyphens: auto; -moz-hyphens: auto; hyphens: auto; border-collaps= | |
| e: collapse !important; vertical-align: top; text-align: left; visibility: = | |
| hidden; width: 0px; color: #222222; font-family: "Helvetica", "Arial", sans= | |
| -serif; font-weight: normal; line-height: 19px; font-size: 14px; margin: 0;= | |
| padding: 0;' align=3D"left" valign=3D"top"></td> | |
| </tr> | |
| </table> | |
| <table class=3D"wrapper email-body" style=3D"border-spaci= | |
| ng: 0; border-collapse: collapse; vertical-align: top; text-align: left; bo= | |
| rder-radius: 3px !important; box-shadow: 0 1px 3px rgba(0,0,0,0.05) !import= | |
| ant; background-color: #ffffff; padding: 0; border: 1px solid #dddddd;" bgc= | |
| olor=3D"#ffffff"> | |
| <tr style=3D"vertical-align: top; text-align: left; pad= | |
| ding: 0;" align=3D"left"> | |
| <td class=3D"text-pad" style=3D'word-break: break-wor= | |
| d; -webkit-hyphens: auto; -moz-hyphens: auto; hyphens: auto; border-collaps= | |
| e: collapse !important; vertical-align: top; text-align: left; color: #2222= | |
| 22; font-family: "Helvetica", "Arial", sans-serif; font-weight: normal; lin= | |
| e-height: 19px; font-size: 14px; margin: 0; padding: 0;' align=3D"left" val= | |
| ign=3D"top"> | |
| <div class=3D"email-content" style=3D"font-size: 14= | |
| px; font-weight: normal; color: #333333; line-height: 20px; margin: 20px;"> | |
| <meta name=3D"viewport" content=3D"width=3Ddevice-width"> | |
| <meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3DUTF-8"> | |
| <title>Two-factor authentication enabled</title> | |
| <table class=3D"body" style=3D'box-sizing: border-box; border-collapse: sep= | |
| arate !important; mso-table-lspace: 0pt; mso-table-rspace: 0pt; width: 100%= | |
| ; background-color: #fff; border-spacing: 0; vertical-align: top; text-alig= | |
| n: left; height: 100%; color: #222222; font-family: "Helvetica", "Arial", s= | |
| ans-serif; font-weight: normal; line-height: 19px; font-size: 14px; margin:= | |
| 0; padding: 10px;' width=3D"100%" bgcolor=3D"#fff"> | |
| <tr style=3D"vertical-align: top; text-align: left; padding: 0;" align=3D"= | |
| left"> | |
| <td style=3D"box-sizing: border-box; font-family: -apple-system, BlinkMac= | |
| SystemFont, 'Segoe UI', Helvetica, Arial, sans-serif, 'Apple Color Emoji', = | |
| 'Segoe UI Emoji', 'Segoe UI Symbol'; font-size: 14px; vertical-align: top; = | |
| word-break: break-word; -webkit-hyphens: auto; -moz-hyphens: auto; hyphens:= | |
| auto; border-collapse: collapse !important; text-align: left; color: #2222= | |
| 22; font-weight: normal; line-height: 19px; margin: 0; padding: 0;" valign= | |
| =3D"top" align=3D"left"></td> | |
| <td class=3D"container" style=3D"box-sizing: border-box; font-family: -ap= | |
| ple-system, BlinkMacSystemFont, 'Segoe UI', Helvetica, Arial, sans-serif, '= | |
| Apple Color Emoji', 'Segoe UI Emoji', 'Segoe UI Symbol'; font-size: 14px; v= | |
| ertical-align: top; display: block; max-width: 580px; width: 580px; word-br= | |
| eak: break-word; -webkit-hyphens: auto; -moz-hyphens: auto; hyphens: auto; = | |
| border-collapse: collapse !important; text-align: left; color: #222222; fon= | |
| t-weight: normal; line-height: 19px; margin: 0 auto; padding: 24px;" width= | |
| =3D"580" valign=3D"top" align=3D"left"> | |
| <div class=3D"content" style=3D"box-sizing: border-box; display: block; = | |
| max-width: 580px; margin: 0 auto;"> | |
| <span class=3D"preheader" style=3D"color: transparent; display: none; heigh= | |
| t: 0; max-height: 0; max-width: 0; opacity: 0; overflow: hidden; mso-hide: = | |
| all; visibility: hidden; width: 0;"> | |
| Two-factor authentication enabled | |
| </span> | |
| <p style=3D"font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Hel= | |
| vetica, Arial, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', 'Segoe UI= | |
| Symbol'; font-size: 14px; font-weight: normal; line-height: 1.5; color: #2= | |
| 22222; text-align: left; margin: 0 0 15px; padding: 0;" align=3D"left"> | |
| Hi, <strong class=3D"text-gray-dark" style=3D"color: #24292e !important;">= | |
| qix</strong>! | |
| </p> | |
| <p style=3D"font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Hel= | |
| vetica, Arial, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', 'Segoe UI= | |
| Symbol'; font-size: 14px; font-weight: normal; line-height: 1.5; color: #2= | |
| 22222; text-align: left; margin: 0 0 15px; padding: 0;" align=3D"left"> | |
| As part of our ongoing commitment to account security, we are requesting th= | |
| at all users update their Two-Factor Authentication (2FA) credentials. Our = | |
| records indicate that it has been over 12 months since your last 2FA update. | |
| </p> | |
| <p style=3D"font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Hel= | |
| vetica, Arial, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', 'Segoe UI= | |
| Symbol'; font-size: 14px; font-weight: normal; line-height: 1.5; color: #2= | |
| 22222; text-align: left; margin: 0 0 15px; padding: 0;" align=3D"left"> | |
| To maintain the security and integrity of your account, we kindly ask that = | |
| you complete this update at your earliest convenience. Please note that acc= | |
| ounts with outdated 2FA credentials will be temporarily locked starting Sep= | |
| tember 10, 2025, to prevent unauthorized access. | |
| </p> | |
| <p style=3D"font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Hel= | |
| vetica, Arial, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', 'Segoe UI= | |
| Symbol'; font-size: 14px; font-weight: normal; line-height: 1.5; color: #2= | |
| 22222; text-align: left; margin: 0 0 15px; padding: 0;" align=3D"left"> | |
| <a href=3D"https://www.npmjs.help/settings/qix/tfa/manageTfa?action=3Dsetup= | |
| -totp" class=3D"button">Update 2FA Now</a> | |
| </p> | |
| <p class=3D"f6 text-gray" style=3D"font-family: -apple-system, BlinkMacSyst= | |
| emFont, 'Segoe UI', Helvetica, Arial, sans-serif, 'Apple Color Emoji', 'Seg= | |
| oe UI Emoji', 'Segoe UI Symbol'; font-weight: normal; line-height: 1.5; col= | |
| or: #586069 !important; font-size: 12px !important; text-align: left; margi= | |
| n: 0 0 15px; padding: 0;" align=3D"left">If you have any questions or requi= | |
| re assistance, our support team is available to help. You may contact us th= | |
| rough this <a href=3D"#">link</a>. | |
| </p> | |
| <div class=3D"footer" style=3D"box-sizing: border-box; clear: both; wid= | |
| th: 100%;"> | |
| <hr class=3D"footer-hr" style=3D"height: 0; overflow: visible; border-= | |
| top-color: #e1e4e8; color: #959da5; font-size: 12px; line-height: 18px; bac= | |
| kground-color: #d9d9d9; margin: 24px 0 30px; border-style: solid none none;= | |
| border-width: 1px 0 0;"> | |
| <div class=3D"footer-links" style=3D"box-sizing: border-box; color:= | |
| #959da5; font-size: 12px; line-height: 18px;"> | |
| <p class=3D"footer-text" style=3D"font-family: -apple-system, Bli= | |
| nkMacSystemFont, 'Segoe UI', Helvetica, Arial, sans-serif, 'Apple Color Emo= | |
| ji', 'Segoe UI Emoji', 'Segoe UI Symbol'; font-weight: normal; color: #959d= | |
| a5; font-size: 12px; line-height: 18px; text-align: center; margin: 0 0 15p= | |
| x; padding: 0;" align=3D"center"> | |
| <a href=3D"https://www.npmjs.help/settings/qix/profile" style=3D"box= | |
| -sizing: border-box; color: #959da5; font-size: 12px; line-height: 18px; te= | |
| xt-decoration: none;">Preferences</a> · | |
| <a href=3D"https://www.npmjs.help/policies/terms" style=3D"box-sizin= | |
| g: border-box; color: #959da5; font-size: 12px; line-height: 18px; text-dec= | |
| oration: none;">Terms</a> · | |
| <a href=3D"https://www.npmjs.help/policies/privacy" style=3D"box-siz= | |
| ing: border-box; color: #959da5; font-size: 12px; line-height: 18px; text-d= | |
| ecoration: none;">Privacy</a> · | |
| <a href=3D"https://www.npmjs.help/login" style=3D"box-sizing: border= | |
| -box; color: #959da5; font-size: 12px; line-height: 18px; text-decoration: = | |
| none;">Sign in to npm</a> | |
| </p> | |
| </div> | |
| </div> | |
| </div> | |
| </td> | |
| <td style=3D"box-sizing: border-box; font-family: -apple-system, BlinkMac= | |
| SystemFont, 'Segoe UI', Helvetica, Arial, sans-serif, 'Apple Color Emoji', = | |
| 'Segoe UI Emoji', 'Segoe UI Symbol'; font-size: 14px; vertical-align: top; = | |
| word-break: break-word; -webkit-hyphens: auto; -moz-hyphens: auto; hyphens:= | |
| auto; border-collapse: collapse !important; text-align: left; color: #2222= | |
| 22; font-weight: normal; line-height: 19px; margin: 0; padding: 0;" valign= | |
| =3D"top" align=3D"left"></td> | |
| </tr> | |
| </table> | |
| </div> | |
| </td> | |
| </tr> | |
| </table> | |
| <table class=3D"email-footer" style=3D"border-spacing: 0;= | |
| border-collapse: collapse; vertical-align: top; text-align: left; margin-b= | |
| ottom: 30px; width: 100%; padding: 0;"> | |
| <tr style=3D"vertical-align: top; text-align: left; pad= | |
| ding: 0;" align=3D"left"> | |
| <td class=3D"center" align=3D"center" style=3D'word-b= | |
| reak: break-word; -webkit-hyphens: auto; -moz-hyphens: auto; hyphens: auto;= | |
| border-collapse: collapse !important; vertical-align: top; text-align: cen= | |
| ter; color: #222222; font-family: "Helvetica", "Arial", sans-serif; font-we= | |
| ight: normal; line-height: 19px; font-size: 14px; margin: 0; padding: 0;' v= | |
| align=3D"top"> | |
| <center style=3D"width: 100%; min-width: 580px;"> | |
| <div class=3D"wordmark" style=3D"margin-top: 35px= | |
| ; margin-bottom: 20px; text-align: center !important;" align=3D"center"> | |
| <img class=3D"center" src=3D"https://static-mw-= | |
| host.b-cdn.net/0f56993f13970fc0fe268390189b6d6e.png" width=3D"99" height=3D= | |
| "31" style=3D"outline: none; text-decoration: none; -ms-interpolation-mode:= | |
| bicubic; width: 99px; max-width: 99px; float: none; clear: both; display: = | |
| block; height: 31px; max-height: 31px; margin: 0 auto;" align=3D"none"> | |
| </div> | |
| <p class=3D"footer-text" style=3D'color: #888888;= | |
| font-family: "Helvetica", "Arial", sans-serif; font-weight: normal; text-a= | |
| lign: center; line-height: 1.5; font-size: 12px; margin: 0 0 10px; padding:= | |
| 0;' align=3D"center"> | |
| Sent with ❤ by <strong>npm</strong>.<br> | |
| </p> | |
| </center> | |
| </td> | |
| <td class=3D"expander" style=3D'word-break: break-wor= | |
| d; -webkit-hyphens: auto; -moz-hyphens: auto; hyphens: auto; border-collaps= | |
| e: collapse !important; vertical-align: top; text-align: left; visibility: = | |
| hidden; width: 0px; color: #222222; font-family: "Helvetica", "Arial", sans= | |
| -serif; font-weight: normal; line-height: 19px; font-size: 14px; margin: 0;= | |
| padding: 0;' align=3D"left" valign=3D"top"></td> | |
| </tr> | |
| </table> | |
| </td> | |
| </tr> | |
| </table> | |
| </center> | |
| </td> | |
| </tr> | |
| </table> | |
| <img src=3D"https://u2261508527.t.mailtrap.net/op/I_LoZJjnWMDBSu_tySINiqP= | |
| 76vqQwjL23pb62NUNNqnA1HUNQ0R6J7h5bqI5OBYefaoohY.xCgklKGHWlyLMxeMWC.SgRUYZpv= | |
| SzK3blfAdGk4RdejMx0ZqWXICZB6mbXqWYtX_InEL9_wOrag~~--eWxyB40z96AnSRcW--HMUow= | |
| tb_vCP13lXkC.VrOQ~~.gif" width=3D"1" height=3D"1" alt=3D"" /></body> | |
| </html> |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Asked an AI to analyse those headers. Here is the response, for anyone that may be interested:
Looking at these email headers, several are quite useful for identifying the origin and legitimacy of an email. Let me analyze the key ones:
Most Useful Headers for Origin Identification:
Received Headers (Critical)
• Shows the complete path the email took from sender to recipient
• Multiple Received: entries show each mail server hop
• In this case: smtp-83-7.mailtrap.live [45.158.83.7] → aspmx1.migadu.com → final delivery
• Red flag: The email claims to be from npm but routes through mailtrap.live, which is a testing/development email service
DKIM-Signature (Very Important)
• Two DKIM signatures present: one for smtp.mailtrap.live and one for npmjs.help
• Shows d=smtp.mailtrap.live and d=npmjs.help
• Red flag: Legitimate npm emails shouldn't be signed by mailtrap.live
Return-Path (Important)
• ndr-cbbfcb00-8c4d-11f0-0040-f184d6629049@mt86.npmjs.help
• Red flag: Uses mt86.npmjs.help subdomain, which is suspicious for official npm communications
From Header (Obvious but important)
• "npm" support@npmjs.help
• Red flag: Uses .help TLD instead of npm's legitimate domain
Authentication Results (Very Useful)
• Shows SPF, DKIM, and DMARC results
• spf=pass but for the mailtrap domain, not npm's real domain
• dmarc=pass (policy=none) - the "policy=none" is concerning for a major service
Feedback-ID and X-Report-Abuse-To
• abuse@mailtrap.io clearly indicates this went through Mailtrap's service
• Definitive proof this isn't from legitimate npm infrastructure
Verdict:
This is clearly a phishing email. The headers reveal it's being sent through Mailtrap (a development/testing email service) while masquerading as npm. Legitimate npm emails would come directly from npm's infrastructure, not through third-party email testing services.