GoKawiil - Tech News

1.

Microsoft links Mastra AI supply chain attack to North Korean hackers (bleepingcomputer.com)

2026-06-20 | get Cybersecurity Software Suite → | tags: mastra ai, sapphire sleet, npm packages

2.

AUR Packages Compromised with Infostealer and Rootkit (news.ycombinator.com)

2026-06-12 | get Linux Security Toolkit → | tags: arch, compromise, npm package

3.

GitHub announces npm security changes to tackle supply-chain attacks (bleepingcomputer.com)

2026-06-10 | get npm Security Audit Tool → | tags: dependencies, dependency, explicitly

4.

New IronWorm malware hits 36 packages in npm supply-chain attack (bleepingcomputer.com)

2026-06-04 | get Cybersecurity Software Suite → | tags: ironworm, npm, supply-chain

5.

Red Hat hit by npm supply‑chain attack - here's how to stay safe (zdnet.com)

2026-06-03 | by Steven Vaughan-Nichols | get NPM Security Monitoring Tool → | tags: red hat, npm, github

6.

Agentic Mfw (news.ycombinator.com)

2026-06-03 | tags: agentic, mfw, https

7.

Dozens of Red Hat packages backdoored through its official NPM channel (arstechnica.com)

2026-06-01 | get Red Hat NPM Security Kit → | tags: red hat, npm, supply-chain attack

8.

Dozens of Red Hat packages backdoored through its offical NPM channel (arstechnica.com)

2026-06-01 | get Red Hat Enterprise Linux Book → | tags: red hat, npm, supply chain

9.

Red Hat npm packages compromised to steal developer credentials (bleepingcomputer.com)

2026-06-01 | get Red Hat Developer Security Kit → | tags: red hat, npm packages, shai-hulud

10.

Red Hat npm Packages Compromised to Spread a Credential-Stealing Worm (slashdot.org)

2026-06-01 | get Red Hat Linux Security Kit → | tags: red hat, npm, credential-stealing

11.

Show HN: DepsGuard – one command to harden NPM/pnpm/yarn/bun/uv configs (news.ycombinator.com)

2026-06-01 | get NPM Security Hardening Tool → | tags: depsguard, npm, supply chain

12.

Malicious npm packages detected across Red Hat Cloud Services (news.ycombinator.com)

2026-06-01 | get Secure npm package scanner → | tags: npm, red hat, malicious packages

13.

NPM packages from Red Hat have been compromised (news.ycombinator.com)

2026-06-01 | get Red Hat Linux Book → | tags: npm, red hat, package security

14.

NPM packages from RedHat have been compromised (news.ycombinator.com)

2026-06-01 | get Red Hat NPM Security Kit → | tags: npm, redhat, compromised

15.

Npm-scan: Modern supply chain security for the npm ecosystem (news.ycombinator.com)

2026-06-01 | get npm Security Scanner Tool → | tags: npm, supply chain security, huggingface

16.

Claude Code – Everything You Can Configure That the Docs Don't Tell You (news.ycombinator.com)

2026-05-29 | by André Figueira | get Claude AI Coding Assistant → | tags: claude code, anthropic-ai, yolo classifier

17.

Perplexity launches Bumblebee: How its new read-only dev scanner differs from Chainguard (zdnet.com)

2026-05-28 | by Steven Vaughan-Nichols | get Bumblebee Dev Scanner → | tags: perplexity, bumblebee, chainguard

18.

You Should Not Update Your Dependencies (news.ycombinator.com)

2026-05-27 | by Sam Alba | get Dependency Management Toolkit → | tags: linux, dependencies, supply chain

19.

Valid certificates, stolen accounts: how attackers broke npm's last trust signal (venturebeat.com)

2026-05-22 | get npm Security Badge → | tags: sigstore, npm, nx console

20.

GitHub introduces staged publishing and new install-time controls for NPM (news.ycombinator.com)

2026-05-22 | get NPM Package Manager → | tags: npm, github, staged publishing

21.

Deno 2.8 (news.ycombinator.com)

2026-05-22 | get Deno 2.8 T-Shirt → | tags: deno, deno.land, npm

22.

Uv is fantastic, but its package management UX is a mess (news.ycombinator.com)

2026-05-21 | by Kevin Renskers | tags: python, astral, poetry

23.

GitHub links repo breach to TanStack npm supply-chain attack (bleepingcomputer.com)

2026-05-21 | get TanStack Query Book → | tags: github, tanstack, npm

24.

GitHub confirms 3,800 internal repos stolen through poisoned VS Code extension as supply chain worm hits Microsoft’s Python SDK (venturebeat.com)

2026-05-20 | get VS Code Extension Security Kit → | tags: github, microsoft, python sdk

25.

Grafana breach caused by missed token rotation after TanStack attack (bleepingcomputer.com)

2026-05-20 | get Grafana Security Badge → | tags: grafana, tanstack, github

26.

Dumb ways for an open source project to die (news.ycombinator.com)

2026-05-19 | by Andrew Nesbitt | get Open Source Survival Kit → | tags: open source, github, npm

27.

Dumb Ways for an Open Source Project to Die (news.ycombinator.com)

2026-05-19 | by Andrew Nesbitt | get Open Source Survival Kit → | tags: open source, github, npm

28.

Show HN: Id-agent – Token efficient UUID alternative for AI agents (news.ycombinator.com)

2026-05-19 | get UUID Generator Tool → | tags: id-agent, uuid v4, o200k_base

29.

New Shai-Hulud malware wave compromises 600 npm packages (bleepingcomputer.com)

2026-05-19 | get NPM Package Security Scanner → | tags: shai-hulud, npm, @antv

30.

Mini Shai-Hulud Strikes Again: 314 npm Packages Compromised (news.ycombinator.com)

2026-05-19 | get npm package security kit → | tags: npm, atool, mini shai-hulud