PhantomRaven attack floods npm with credential-stealing packages
(bleepingcomputer.com)
151.
152.
153.
React Flow, open source libraries for node-based UIs with React or Svelte
(news.ycombinator.com)
154.
UPS Is Destroying Packages Stuck in Trump’s Tariff Chaos
(gizmodo.com)
155.
Being blocked from contributing to lodash
(news.ycombinator.com)
156.
PyOCI – Publish and install private Python packages using OCI/Docker registries
(news.ycombinator.com)
157.
Cleaning house in Nx monorepo, how i removed unused deps safely
(news.ycombinator.com)
158.
Unofficial Postmark MCP npm silently stole users' emails
(bleepingcomputer.com)
159.
NPM package caught using QR Code to fetch cookie-stealing malware
(bleepingcomputer.com)
160.
Show HN: Tips to stay safe from NPM supply chain attacks
(news.ycombinator.com)
161.
If all the world were a monorepo
(news.ycombinator.com)
162.
Tinycolor supply chain attack post-mortem
(news.ycombinator.com)
163.
CrowdStrike Infested With "Self-Replicating Worms"
(futurism.com)
164.
Shai-Hulud malware attack: Tinycolor and over 40 NPM packages compromised
(news.ycombinator.com)
165.
Live Updates: Shai-Hulud, the Most Dangerous NPM Breach in History
(news.ycombinator.com)
166.
Self-propagating supply chain attack hits 187 npm packages
(bleepingcomputer.com)
167.
Self-Replicating Worm Hits 180+ Software Packages
(krebsonsecurity.com)
168.
Self Propagating NPM Malware Compromises over 40 Packages
(news.ycombinator.com)
169.
Which NPM package has the largest version number?
(news.ycombinator.com)
170.
171.
Behind the scenes of Bun Install
(news.ycombinator.com)
172.
Behind the Scenes of Bun Install
(news.ycombinator.com)
173.
Hackers left empty-handed after massive NPM supply-chain attack
(bleepingcomputer.com)
174.
175.
176.
177.
A critique of package managers
(news.ycombinator.com)
178.
179.
Nuclear: Desktop music player focused on streaming from free sources
(news.ycombinator.com)
180.
Removing Guix from Debian
(news.ycombinator.com)