GoKawiil - Tech News

31.

How AI has suddenly become much more useful to open-source developers (zdnet.com)

2026-04-01 | by Steven Vaughan-Nichols | get OpenAI GPT-4 API → | tags: open-source, npm, anchore

32.

Axios NPM Package Compromised in Precision Attack (darkreading.com)

2026-03-31 | by Alexander Culafi | get NPM Security Scanner Tool → | tags: npm, axios, crypto-js

33.

Claude Code source code accidentally leaked in NPM package (bleepingcomputer.com)

2026-03-31 | tags: anthropic, claude code, npm

34.

Entire Claude Code CLI source code leaks thanks to exposed map file (arstechnica.com)

2026-03-31 | tags: anthropic, claude code, npm package

35.

Claude Code's Source Code Leaks Via npm Source Maps (slashdot.org)

2026-03-31 | get Source Map Debugging Tool → | tags: anthropic, npm, cloudflare

36.

North Korean hackers blamed for hijacking popular Axios open source project to spread malware (techcrunch.com)

2026-03-31 | by Lorenzo Franceschi-Bicchierai | get Cybersecurity USB Data Block → | tags: axios, npm, open source

37.

North Korean hackers blamed for hijacking popular Axios open-source project to spread malware (techcrunch.com)

2026-03-31 | by Lorenzo Franceschi-Bicchierai | get Cybersecurity Software Suite → | tags: axios, npm, north korean hackers

38.

Hacker hijacks Axios open-source project, used by millions, to push malware (techcrunch.com)

2026-03-31 | by Lorenzo Franceschi-Bicchierai | get Cybersecurity Software Suite → | tags: axios, npm, open-source

39.

Claude Code's source code appears to have leaked: here's what we know (venturebeat.com)

2026-03-31 | get AI Coding Assistant Tool → | tags: anthropic, claude code, npm registry

40.

The Claude Code Source Leak: fake tools, frustration regexes, undercover mode (news.ycombinator.com)

2026-03-31 | by Alex Kim | tags: claude code, anthropic, npm package

41.

One of JavaScript's most popular libraries compromised by hackers — Axios npm package hit in supply chain attack that deployed a cross-platform RAT (tomshardware.com)

2026-03-31 | by Luke James | get Axios JavaScript Library → | tags: axios, npm, supply chain attack

42.

Hackers compromise Axios npm package to drop cross-platform malware (bleepingcomputer.com)

2026-03-31 | get NPM Security Scanner Tool → | tags: axios, npm, node package manager

43.

Claude Code's source code has been leaked via a map file in their NPM registry (news.ycombinator.com)

2026-03-31 | tags: claude code, npm registry, javascript

44.

Axios compromised on NPM – Malicious versions drop remote access trojan (news.ycombinator.com)

2026-03-31 | get NPM Package Security Scanner → | tags: axios, npm, stepsecurity

45.

Axios Compromised on NPM – Malicious Versions Drop Remote Access Trojan (news.ycombinator.com)

2026-03-31 | get NPM Security Monitoring Tool → | tags: npm, axios, malware

46.

Pretext: TypeScript library for multiline text measurement and layout (news.ycombinator.com)

2026-03-28 | get TextMetrics Measurement Tool → | tags: typescript, pretext, chenglou

47.

CanisterWorm malware wipes Iranian machines for no apparent reason — sophisticated attack spreads through npm packages and uses ICP canister as control surface (tomshardware.com)

2026-03-26 | by Bruno Ferreira | get Malware Removal Toolkit → | tags: canisterworm, npm packages, teampcp

48.

The three pillars of JavaScript bloat (news.ycombinator.com)

2026-03-22 | get JavaScript Performance Optimization Kit → | tags: npm, dependency bloat, node.js

49.

The Three Pillars of JavaScript Bloat (news.ycombinator.com)

2026-03-22 | get JavaScript Performance Optimization Book → | tags: npm, dependency bloat, node.js

50.

Trivy Supply Chain Attack Spreads, Triggers Self-Spreading CanisterWorm Across 47 npm Packages (slashdot.org)

2026-03-22 | by Posted | get Trivy Vulnerability Scanner → | tags: trivy, supply chain attack, npm packages

51.

GlassWorm malware hits 400+ code repos on GitHub, npm, VSCode, OpenVSX (bleepingcomputer.com)

2026-03-17 | get GitHub Security Scanner Tool → | tags: glassworm, github, vscode

52.

GlassWorm Malware Evolves to Hide in Dependencies (darkreading.com)

2026-03-16 | by Alexander Culafi | get Dependency Scanner Tool → | tags: glassworm, open vsx, npm

53.

Glassworm is back: A new wave of invisible Unicode attacks hits repositories (news.ycombinator.com)

2026-03-15 | by Start Today | get Unicode Security Scanner → | tags: glassworm, github, unicode

54.

Glassworm Is Back: A New Wave of Invisible Unicode Attacks Hits Repositories (news.ycombinator.com)

2026-03-15 | by Start Today | get Unicode Security Scanner → | tags: glassworm, github, npm

55.

Invisible malicious code attacks 151 GitHub repos and VS Code — Glassworm attack uses blockchain to steal tokens, credentials, and secrets (tomshardware.com)

2026-03-14 | by Luke James | get GitHub Security Scanner → | tags: github, glassworm, solana

56.

Supply-chain attack using invisible code hits GitHub and other repositories (arstechnica.com)

2026-03-13 | get GitHub Security Monitoring Tool → | tags: github, npm, aikido security

57.

Vite 8.0 Is Out (news.ycombinator.com)

2026-03-13 | get Vite 8.0 Development Kit → | tags: vite, rollup, rolldown

58.

Show HN: Rudel – Claude Code Session Analytics (news.ycombinator.com)

2026-03-12 | get Analytics → | tags: bun, rudel, claudocode

59.

Secure Secrets Management for Cursor Cloud Agents (news.ycombinator.com)

2026-03-10 | get Cloud Security Manager → | tags: ubuntu, github, cursor

60.

If It Quacks Like a Package Manager (news.ycombinator.com)

2026-03-08 | by Andrew Nesbitt | get Package Manager → | tags: github actions, npm, rust