sign up
sign up
sign up
sign up
pull down to refresh
TanStack NPM Packages Compromised
github.com/TanStack/router/issues/7383
1054 sats
\
7 comments
\
@hn
11 May
tech
related
NPM debug and chalk packages compromised
www.aikido.dev/blog/npm-debug-and-chalk-packages-compromised
263 sats
\
0 comments
\
@hn
8 Sep 2025
tech
Tinycolor npm Package Compromised in (another) Supply Chain Attack
socket.dev/blog/tinycolor-supply-chain-attack-affects-40-packages
1053 sats
\
3 comments
\
@aljaz
16 Sep 2025
security
Compromised npm package silently installs OpenClaw on developer machines
www.csoonline.com/article/4135449/compromised-npm-package-silently-installs-openclaw-on-developer-machines.html
422 sats
\
4 comments
\
@winteryeti
24 Feb
AI
Bitwarden CLI Compromised in Ongoing Checkmarx Supply Chain Campaign
thehackernews.com/2026/04/bitwarden-cli-compromised-in-ongoing.html
1134 sats
\
5 comments
\
@Scoresby
23 Apr
tech
devs
🚨 CRITICAL: supply chain attack on axios
1626 sats
\
8 comments
\
@justin_shocknet
31 Mar
devs
We Just Found Malicious Code in the Popular NPM Package
jdstaerk.substack.com/p/we-just-found-malicious-code-in-the
1497 sats
\
18 comments
\
@kristapsk
8 Sep 2025
security
'Sha1-Hulud' npm malware is back
377 sats
\
0 comments
\
@anon
28 Nov 2025
lightning
Which npm package has the largest version number?
adamhl.dev/blog/largest-number-in-npm-package/
200 sats
\
3 comments
\
@carter
15 Sep 2025
devs
NPM security: preventing supply chain attacks | Snyk (2022)
snyk.io/blog/npm-security-preventing-supply-chain-attacks/
517 sats
\
20 comments
\
@ek
9 Sep 2025
security
Alert: ledger library confirmed compromised and replaced with a drainer.
6146 sats
\
48 comments
\
@IgnaciobTato
14 Dec 2023
privacy
GoDaddy Gave a Domain to a Stranger Without Any Documentation
anchor.host/godaddy-gave-a-domain-to-a-stranger-without-any-documentation/
323 sats
\
0 comments
\
@hn
26 Apr
tech
PhantomRaven: NPM Malware Hidden in Invisible Dependencies
www.koi.ai/blog/phantomraven-npm-malware-hidden-in-invisible-dependencies
389 sats
\
2 comments
\
@kepford
30 Oct 2025
security
How the Coinos nsec got compromised
1087 sats
\
14 comments
\
@ek
29 Sep 2025
security
ECONNREFUSED for `npm install -g pnpm`. help?
259 sats
\
5 comments
\
@deSign_r
24 Oct 2024
devs
Npm Run Hack:Me - A Supply Chain Attack Journey
rxj.dev/posts/npm-run-hack-supply-chain-attack-journey/
661 sats
\
1 comment
\
@k00b
12 Mar 2025
devs
Ghrc.io Appears to Be Malicious
bmitch.net/blog/2025-08-22-ghrc-appears-malicious/
347 sats
\
0 comments
\
@hn
25 Aug 2025
tech
Compromising OpenWrt Supply Chain
flatt.tech/research/posts/compromising-openwrt-supply-chain-sha256-collision/
279 sats
\
1 comment
\
@hn
9 Dec 2024
tech
Internet Archive: Security breach alert
www.theverge.com/2024/10/9/24266419/internet-archive-ddos-attack-pop-up-message
278 sats
\
1 comment
\
@hn
9 Oct 2024
tech
Google broke reCAPTCHA for de-googled Android users
reclaimthenet.org/google-broke-recaptcha-for-de-googled-android-users
1281 sats
\
5 comments
\
@hn
8 May
tech
From where I left
antirez.com/news/144
386 sats
\
1 comment
\
@hn
10 Dec 2024
tech
Unfollow old and follow new Coinos account
njump.me/nevent1qvzqqqqqqypzp5vla32qylgfwpj5sg5q4ct6drg264ls7hp05a8zfu7mhv0xc4y4qythwumn8ghj7cnfw33k76twv4ezuum0vd5kzmp0qy2hwumn8ghj7un9d3shjtnyv9kh2uewd9hj7qpqjxxca45xq0r2ffh8zygz0678yljpwmp9l00xvrrsw9hd9u28xwwsyv3cg8
508 sats
\
6 comments
\
@ek
11 Jul 2025
nostr
more