GoKawiil - Tech News

31.

Leaked Shai-Hulud malware fuels new npm infostealer campaign (bleepingcomputer.com)

2026-05-18 | get Cybersecurity USB Flash Drive → | tags: shai-hulud, npm, oxsecurity

32.

'No way to prevent this,' says only package manager where this regularly happens (news.ycombinator.com)

2026-05-16 | by Kevin Patel | get Linux Package Manager Cheat Sheet → | tags: npm, node.js, web apps

33.

Popular node-ipc npm package compromised to steal credentials (bleepingcomputer.com)

2026-05-15 | get Node.js Security Toolkit → | tags: node-ipc, npm, supply chain attack

34.

OpenAI confirms security breach in TanStack supply chain attack (bleepingcomputer.com)

2026-05-14 | get TanStack Query Book → | tags: openai, tanstack, npm

35.

Protect your enterprise now from the Shai-Hulud worm and npm vulnerability in 6 actionable steps (venturebeat.com)

2026-05-12 | get Cybersecurity Toolkit for Enterprises → | tags: shai-hulud, npm, kubernetes

36.

Worm Redux: Fresh Mini Shai-Hulud Infections Bite Supply Chain (darkreading.com)

2026-05-12 | by Elizabeth Montalbano | get Miniature Sandworm Model → | tags: shai-hulud, npm, tanstack

37.

Shai Hulud attack ships signed malicious TanStack, Mistral npm packages (bleepingcomputer.com)

2026-05-12 | get TanStack Query Book → | tags: shai hulud, tanstack, mistral

38.

Show HN: Safe-install – safer NPM installs with trusted build dependencies (news.ycombinator.com)

2026-05-12 | get NPM Trusted Dependency Toolkit → | tags: npm, safe-install, build dependencies

39.

Postmortem: TanStack NPM supply-chain compromise (news.ycombinator.com)

2026-05-11 | get TanStack Data Grid → | tags: tanstack, npm, supply-chain

40.

Postmortem: TanStack npm supply-chain compromise (news.ycombinator.com)

2026-05-11 | get TanStack React Table → | tags: tanstack, npm, supply-chain

41.

TanStack NPM Packages Compromised (news.ycombinator.com)

2026-05-11 | get TanStack NPM Package Security Kit → | tags: tanstack, npm, packages

42.

Remembering Planet Source Code: Sharing Code Before GitHub Made It Easy (news.ycombinator.com)

2026-05-09 | by Chris Pietschmann | get GitHub T-Shirt → | tags: planet source code, github, visual basic 6

43.

Ask HN: We just had an actual UUID v4 collision... (news.ycombinator.com)

2026-05-08 | get UUID v4 Collision Detector → | tags: uuid v4, npm uuid, database collision

44.

OpenClaw Had a Rough Week (news.ycombinator.com)

2026-05-07 | by Peter Steinberger | get OpenClaw Robotics Kit → | tags: openclaw, clawhub, npm

45.

TeamPCP Hits SAP Packages With 'Mini Shai-Hulud' Attack (darkreading.com)

2026-04-30 | get Cybersecurity USB Lock → | tags: sap, npm, teampcp

46.

Official SAP npm packages compromised to steal credentials (bleepingcomputer.com)

2026-04-29 | get SAP Security Toolkit → | tags: sap npm packages, teampcp attack, cloud application programming model

47.

NPM website was down (news.ycombinator.com)

2026-04-27 | get NPM Package Manager T-Shirt → | tags: npm, npmstatus, twitter

48.

NPM Website Is Down (news.ycombinator.com)

2026-04-27 | get NPM Package Manager T-Shirt → | tags: npm, npmstatus, website

49.

GlassWorm malware attacks return via 73 OpenVSX "sleeper" extensions (bleepingcomputer.com)

2026-04-27 | get OpenVSX Extension Pack → | tags: glassworm, openvsx, npm

50.

Bitwarden CLI npm package compromised to steal developer credentials (bleepingcomputer.com)

2026-04-23 | get Bitwarden CLI Security Badge → | tags: bitwarden, npm, github action

51.

Bitwarden CLI compromised in ongoing Checkmarx supply chain campaign (news.ycombinator.com)

2026-04-23 | get Bitwarden Password Manager → | tags: bitwarden, checkmarx, github actions

52.

Bitwarden CLI Compromised in Ongoing Checkmarx Supply Chain Campaign (news.ycombinator.com)

2026-04-23 | get Bitwarden Password Manager → | tags: bitwarden, checkmarx, github actions

53.

New npm supply-chain attack self-spreads to steal auth tokens (bleepingcomputer.com)

2026-04-22 | get npm Security Audit Tool → | tags: npm, namastex labs, teampcp

54.

Vercel breach exposes the OAuth gap most security teams cannot detect, scope or contain (venturebeat.com)

2026-04-21 | get OAuth Security Monitoring Tool → | tags: vercel, oauth, next.js

55.

Critical flaw in Protobuf library enables JavaScript code execution (news.ycombinator.com)

2026-04-19 | get Protobuf JavaScript Library → | tags: protobuf.js, google protocol buffers, npm registry

56.

Critical flaw in Protobuf library enables JavaScript code execution (bleepingcomputer.com)

2026-04-18 | get Protobuf JavaScript Library → | tags: protobuf.js, google protocol buffers, npm registry

57.

Wacli – WhatsApp CLI (news.ycombinator.com)

2026-04-15 | get WhatsApp Command Line Tool → | tags: whatsmeow, whatsapp, wacli

58.

Wacli – WhatsApp CLI: sync, search, send (news.ycombinator.com)

2026-04-15 | get WhatsApp Command Line Tool → | tags: whatsmeow, whatsapp, wacli

59.

This year’s insane timeline of hacks (news.ycombinator.com)

2026-04-13 | by Patrick Quirk | get Cybersecurity Awareness Kit → | tags: lockheed martin, oracle, npm

60.

Axios Attack Shows How Complex Social Engineering Is Industrialized (darkreading.com)

2026-04-06 | get Social Engineering Awareness Kit → | tags: axios, npm, social engineering