GoKawiil
Tech News
Security researchers at SafeDep discovered that a malicious npm package called mathmain, disguised as a copy of the popular mathjs library, contains a hidden remote access implant. The malicious code stays encrypted and dormant until a specific equation is solved using the library's lusolve() solver function, which acts as a decryption key to unlock and execute the payload.
Apple has updated the Mac Mini for the first time in nearly two years, introducing an M6 base model and an M5 Pro configuration that skips the M5 generation entirely for the standard chip. The base M6 Mini starts at $899, while a maxed-out M5 Pro version with 48GB of memory and 1TB storage reaches $2,899, edging into Mac Studio pricing territory.
Checkmarx researchers uncovered a malicious npm package called 'indexed-btree,' which mimics the legitimate 'sorted-btree' library and has racked up 2 million weekly downloads. Rather than embedding malicious code in install scripts—now restricted by npm's June 2026 security measures—the attackers hid a malware loader inside the package's commonly used BTree.prototype.set() method, which activates only when called with a specific key. Once triggered, the malware gathers system data such as hostname, CPU, memory, and uptime, and sends it to attackers who reportedly control a wallet holding 109 ETH, though its link to this campaign is unconfirmed.
A joint advisory from law enforcement in Japan, the US, Australia and Germany says the North Korean-linked group WaterPlum infected over 30,000 devices across more than 100 countries between December 2025 and July 2026. The hackers drained more than 7,000 cryptocurrency wallets and moved over $10.7 million worth of crypto assets to North Korea, using fake job interviews and malicious code disguised as coding tests or software projects to infect victims.
GlobalFoundries and Marvell Technology have extended their manufacturing partnership, with GlobalFoundries boosting silicon germanium (SiGe) production capacity at its Burlington, Vermont facility. The multi-year deal targets components used in pluggable optical transceivers, near-packaged optics, and co-packaged optics, technologies that data centers need to move data faster than copper wiring allows.
TechCrunch is closing exhibit table registration for its Disrupt 2026 conference tonight at 11:59 p.m. PT, after which startups can no longer secure a spot in the Expo Hall. The event runs October 13-15 at Moscone West in San Francisco and is expected to draw more than 10,000 founders, investors and tech leaders. A $12,500 exhibit package includes a table for all three days, 10 team passes, lead-generation tools, VC access, press-list access and sponsor branding.
Amazon has discounted Samsung's 2025 flagship HW-Q990F soundbar system by 33%, cutting $600 off the package price. The bundle includes an 11.1.4-channel Dolby Atmos soundbar along with a subwoofer and rear surround speakers.
A technical write-up by Vlad Saioc examines how Go's goroutine-based concurrency model can produce 'leaked' goroutines that block indefinitely and never release memory or resources. The piece explains that while tools like the goleak library and Go 1.25's new synctest package help catch such leaks during unit testing, neither can reliably detect leaks in live production systems at scale, leaving goroutine profiles as one of the few practical diagnostic options.
Apple's Swift language team has released Swift 6.4, which makes Swift Build the default engine in Swift Package Manager so projects compile identically on Linux, macOS, and Windows. The update also finalizes the Subprocess API at version 1.0 for cross-platform process management, expands C++ and Java interoperability, and speeds up WebAssembly execution via JavaScriptKit by up to 40 times.
Oracle has begun another round of layoffs, sending termination emails to staff as early as 6 a.m. Monday as part of its ongoing fiscal 2026 restructuring. The company's workforce already shrank by about 21,000 people this fiscal year, and Oracle has now increased its restructuring cost estimate by $700 million to roughly $2.8 billion, though the exact number of newly affected employees remains undisclosed.
Micron unveiled a one-time NT$1 million (~$31,650) cash bonus for Taiwan staff as part of a larger rewards package that guarantees at least NT$1.7 million per worker, calling it the largest such payout in company history. Unions representing roughly 10,000 of Micron's 15,000 Taiwan employees rejected the offer, dismissing it as a distraction and instead demanding a 15% profit-sharing arrangement tied to the company's AI-driven earnings surge.
Asus has released the ROG Swift PG27UCWM, a 27-inch 4K gaming monitor built on its new Tandem RGB Stripe OLED panel technology. It supports 240Hz refresh at 4K (480Hz at 1080p), HDR10, Dolby Vision, DisplayHDR 400, and Adaptive-Sync, with a claimed 0.03ms response time. Reviewers found it delivers sharp imagery and strong gaming performance, positioning it among the top 27-inch 4K OLED displays currently available.