GoKawiil - Tech News

31.

Perplexity launches Bumblebee: How its new read-only dev scanner differs from Chainguard (zdnet.com)

2026-05-28 | by Steven Vaughan-Nichols | get Bumblebee Dev Scanner → | tags: perplexity, bumblebee, chainguard

32.

You Should Not Update Your Dependencies (news.ycombinator.com)

2026-05-27 | by Sam Alba | get Dependency Management Toolkit → | tags: linux, dependencies, supply chain

33.

Valid certificates, stolen accounts: how attackers broke npm's last trust signal (venturebeat.com)

2026-05-22 | get npm Security Badge → | tags: sigstore, npm, nx console

34.

GitHub introduces staged publishing and new install-time controls for NPM (news.ycombinator.com)

2026-05-22 | get NPM Package Manager → | tags: npm, github, staged publishing

35.

Deno 2.8 (news.ycombinator.com)

2026-05-22 | get Deno 2.8 T-Shirt → | tags: deno, deno.land, npm

36.

Uv is fantastic, but its package management UX is a mess (news.ycombinator.com)

2026-05-21 | by Kevin Renskers | tags: python, astral, poetry

37.

GitHub links repo breach to TanStack npm supply-chain attack (bleepingcomputer.com)

2026-05-21 | get TanStack Query Book → | tags: github, tanstack, npm

38.

GitHub confirms 3,800 internal repos stolen through poisoned VS Code extension as supply chain worm hits Microsoft’s Python SDK (venturebeat.com)

2026-05-20 | get VS Code Extension Security Kit → | tags: github, microsoft, python sdk

39.

Grafana breach caused by missed token rotation after TanStack attack (bleepingcomputer.com)

2026-05-20 | get Grafana Security Badge → | tags: grafana, tanstack, github

40.

Dumb ways for an open source project to die (news.ycombinator.com)

2026-05-19 | by Andrew Nesbitt | get Open Source Survival Kit → | tags: open source, github, npm

41.

Dumb Ways for an Open Source Project to Die (news.ycombinator.com)

2026-05-19 | by Andrew Nesbitt | get Open Source Survival Kit → | tags: open source, github, npm

42.

Show HN: Id-agent – Token efficient UUID alternative for AI agents (news.ycombinator.com)

2026-05-19 | get UUID Generator Tool → | tags: id-agent, uuid v4, o200k_base

43.

New Shai-Hulud malware wave compromises 600 npm packages (bleepingcomputer.com)

2026-05-19 | get NPM Package Security Scanner → | tags: shai-hulud, npm, @antv

44.

Mini Shai-Hulud Strikes Again: 314 npm Packages Compromised (news.ycombinator.com)

2026-05-19 | get npm package security kit → | tags: npm, atool, mini shai-hulud

45.

Leaked Shai-Hulud malware fuels new npm infostealer campaign (bleepingcomputer.com)

2026-05-18 | get Cybersecurity USB Flash Drive → | tags: shai-hulud, npm, oxsecurity

46.

'No way to prevent this,' says only package manager where this regularly happens (news.ycombinator.com)

2026-05-16 | by Kevin Patel | get Linux Package Manager Cheat Sheet → | tags: npm, node.js, web apps

47.

Popular node-ipc npm package compromised to steal credentials (bleepingcomputer.com)

2026-05-15 | get Node.js Security Toolkit → | tags: node-ipc, npm, supply chain attack

48.

OpenAI confirms security breach in TanStack supply chain attack (bleepingcomputer.com)

2026-05-14 | get TanStack Query Book → | tags: openai, tanstack, npm

49.

Protect your enterprise now from the Shai-Hulud worm and npm vulnerability in 6 actionable steps (venturebeat.com)

2026-05-12 | get Cybersecurity Toolkit for Enterprises → | tags: shai-hulud, npm, kubernetes

50.

Worm Redux: Fresh Mini Shai-Hulud Infections Bite Supply Chain (darkreading.com)

2026-05-12 | by Elizabeth Montalbano | get Miniature Sandworm Model → | tags: shai-hulud, npm, tanstack

51.

Shai Hulud attack ships signed malicious TanStack, Mistral npm packages (bleepingcomputer.com)

2026-05-12 | get TanStack Query Book → | tags: shai hulud, tanstack, mistral

52.

Show HN: Safe-install – safer NPM installs with trusted build dependencies (news.ycombinator.com)

2026-05-12 | get NPM Trusted Dependency Toolkit → | tags: npm, safe-install, build dependencies

53.

Postmortem: TanStack NPM supply-chain compromise (news.ycombinator.com)

2026-05-11 | get TanStack Data Grid → | tags: tanstack, npm, supply-chain

54.

Postmortem: TanStack npm supply-chain compromise (news.ycombinator.com)

2026-05-11 | get TanStack React Table → | tags: tanstack, npm, supply-chain

55.

TanStack NPM Packages Compromised (news.ycombinator.com)

2026-05-11 | get TanStack NPM Package Security Kit → | tags: tanstack, npm, packages

56.

Remembering Planet Source Code: Sharing Code Before GitHub Made It Easy (news.ycombinator.com)

2026-05-09 | by Chris Pietschmann | get GitHub T-Shirt → | tags: planet source code, github, visual basic 6

57.

Ask HN: We just had an actual UUID v4 collision... (news.ycombinator.com)

2026-05-08 | get UUID v4 Collision Detector → | tags: uuid v4, npm uuid, database collision

58.

OpenClaw Had a Rough Week (news.ycombinator.com)

2026-05-07 | by Peter Steinberger | get OpenClaw Robotics Kit → | tags: openclaw, clawhub, npm

59.

TeamPCP Hits SAP Packages With 'Mini Shai-Hulud' Attack (darkreading.com)

2026-04-30 | get Cybersecurity USB Lock → | tags: sap, npm, teampcp

60.

Official SAP npm packages compromised to steal credentials (bleepingcomputer.com)

2026-04-29 | get SAP Security Toolkit → | tags: sap npm packages, teampcp attack, cloud application programming model