GoKawiil - Tech News

1.

Protect your enterprise now from the Shai-Hulud worm and npm vulnerability in 6 actionable steps (venturebeat.com)

2026-05-12 | get Cybersecurity Toolkit for Enterprises → | tags: shai-hulud, npm, kubernetes

2.

Worm Redux: Fresh Mini Shai-Hulud Infections Bite Supply Chain (darkreading.com)

2026-05-12 | by Elizabeth Montalbano | tags: shai-hulud, npm, tanstack

3.

Shai Hulud attack ships signed malicious TanStack, Mistral npm packages (bleepingcomputer.com)

2026-05-12 | tags: shai hulud, tanstack, mistral

4.

Show HN: Safe-install – safer NPM installs with trusted build dependencies (news.ycombinator.com)

2026-05-12 | get NPM Trusted Dependency Toolkit → | tags: npm, safe-install, build dependencies

5.

Postmortem: TanStack NPM supply-chain compromise (news.ycombinator.com)

2026-05-11 | get TanStack Data Grid → | tags: tanstack, npm, supply-chain

6.

Postmortem: TanStack npm supply-chain compromise (news.ycombinator.com)

2026-05-11 | get TanStack React Table → | tags: tanstack, npm, supply-chain

7.

TanStack NPM Packages Compromised (news.ycombinator.com)

2026-05-11 | get TanStack NPM Package Security Kit → | tags: tanstack, npm, packages

8.

Remembering Planet Source Code: Sharing Code Before GitHub Made It Easy (news.ycombinator.com)

2026-05-09 | by Chris Pietschmann | get GitHub T-Shirt → | tags: planet source code, github, visual basic 6

9.

Ask HN: We just had an actual UUID v4 collision... (news.ycombinator.com)

2026-05-08 | get UUID v4 Collision Detector → | tags: uuid v4, npm uuid, database collision

10.

OpenClaw Had a Rough Week (news.ycombinator.com)

2026-05-07 | by Peter Steinberger | get OpenClaw Robotics Kit → | tags: openclaw, clawhub, npm

11.

TeamPCP Hits SAP Packages With 'Mini Shai-Hulud' Attack (darkreading.com)

2026-04-30 | get Cybersecurity USB Lock → | tags: sap, npm, teampcp

12.

Official SAP npm packages compromised to steal credentials (bleepingcomputer.com)

2026-04-29 | get SAP Security Toolkit → | tags: sap npm packages, teampcp attack, cloud application programming model

13.

NPM website was down (news.ycombinator.com)

2026-04-27 | get NPM Package Manager T-Shirt → | tags: npm, npmstatus, twitter

14.

NPM Website Is Down (news.ycombinator.com)

2026-04-27 | get NPM Package Manager T-Shirt → | tags: npm, npmstatus, website

15.

GlassWorm malware attacks return via 73 OpenVSX "sleeper" extensions (bleepingcomputer.com)

2026-04-27 | get OpenVSX Extension Pack → | tags: glassworm, openvsx, npm

16.

Bitwarden CLI npm package compromised to steal developer credentials (bleepingcomputer.com)

2026-04-23 | get Bitwarden CLI Security Badge → | tags: bitwarden, npm, github action

17.

Bitwarden CLI compromised in ongoing Checkmarx supply chain campaign (news.ycombinator.com)

2026-04-23 | get Bitwarden Password Manager → | tags: bitwarden, checkmarx, github actions

18.

Bitwarden CLI Compromised in Ongoing Checkmarx Supply Chain Campaign (news.ycombinator.com)

2026-04-23 | get Bitwarden Password Manager → | tags: bitwarden, checkmarx, github actions

19.

New npm supply-chain attack self-spreads to steal auth tokens (bleepingcomputer.com)

2026-04-22 | get npm Security Audit Tool → | tags: npm, namastex labs, teampcp

20.

Vercel breach exposes the OAuth gap most security teams cannot detect, scope or contain (venturebeat.com)

2026-04-21 | get OAuth Security Monitoring Tool → | tags: vercel, oauth, next.js

21.

Critical flaw in Protobuf library enables JavaScript code execution (news.ycombinator.com)

2026-04-19 | get Protobuf JavaScript Library → | tags: protobuf.js, google protocol buffers, npm registry

22.

Critical flaw in Protobuf library enables JavaScript code execution (bleepingcomputer.com)

2026-04-18 | get Protobuf JavaScript Library → | tags: protobuf.js, google protocol buffers, npm registry

23.

Wacli – WhatsApp CLI (news.ycombinator.com)

2026-04-15 | get WhatsApp Command Line Tool → | tags: whatsmeow, whatsapp, wacli

24.

Wacli – WhatsApp CLI: sync, search, send (news.ycombinator.com)

2026-04-15 | get WhatsApp Command Line Tool → | tags: whatsmeow, whatsapp, wacli

25.

This year’s insane timeline of hacks (news.ycombinator.com)

2026-04-13 | by Patrick Quirk | get Cybersecurity Awareness Kit → | tags: lockheed martin, oracle, npm

26.

Axios Attack Shows How Complex Social Engineering Is Industrialized (darkreading.com)

2026-04-06 | get Social Engineering Awareness Kit → | tags: axios, npm, social engineering

27.

Axios Attack Shows Complex Social Engineering Is Industrialized (darkreading.com)

2026-04-06 | get Social Engineering Awareness Kit → | tags: axios, npm, threat actors

28.

Axios Attack Shows Social Complex Engineering Is Industrialized (darkreading.com)

2026-04-06 | get Social Engineering Awareness Kit → | tags: axios, npm, social engineering

29.

Top NPM Maintainers Targeted with AI Deepfakes in Massive Supply-Chain Attack, Axios Briefly Compromised (slashdot.org)

2026-04-05 | by Posted | get AI Deepfake Detection Tool → | tags: npm, axios, google

30.

Axios npm hack used fake Teams error fix to hijack maintainer account (bleepingcomputer.com)

2026-04-04 | get NPM Security Monitoring Tool → | tags: axios, npm, unc1069