GoKawiil - Tech News

1.

Malicious npm packages evade install-script defenses at runtime (bleepingcomputer.com)

2026-09-20 | get YubiKey 5C NFC security key → | tags: indexed-btree, npm supply chain, sorted-btree

2.

North Korean WaterPlum hackers infected 30,000 devices worldwide (bleepingcomputer.com)

2026-09-19 | get YubiKey 5 NFC security key → | tags: waterplum, north korea, contagious interview

3.

Oracle’s 6am layoff emails hit staff amid new wave of cuts (news.ycombinator.com)

2026-09-14 | by Sami Khan | tags: oracle, layoffs, fiscal 2026

4.

Oracle's Cold 6AM Layoff Emails Hit Staff Amid New Wave of Cuts (news.ycombinator.com)

2026-09-14 | by Sami Khan | tags: oracle, fiscal 2026, layoffs

5.

OpenAI’s rogue AI tried to hack another company in May (theverge.com)

2026-09-12 | by Terrence O'Brien | get YubiKey 5 NFC security key → | tags: openai, rubygems, ai agents

6.

Why Cheap Link Building Is the Most Expensive Marketing You Can Buy (feeds.feedburner.com)

2026-09-03 | by Boris Dzhingarov | tags: backlink packages, domain authority, private blog networks

7.

Massive ChainDrop npm supply-chain attack infects hundreds of packages (bleepingcomputer.com)

2026-08-04 | tags: npm, chaindrop, github

8.

GitHub, PyPI add time-based defenses against supply chain attacks (bleepingcomputer.com)

2026-07-26 | tags: github, pypi, dependabot

9.

LLM Usage in Debian: Three Proposals (news.ycombinator.com)

2026-07-25 | tags: debian, large language models, lintian

10.

AsyncAPI npm packages infected with credential-stealing malware (bleepingcomputer.com)

2026-07-15 | tags: asyncapi, attacker, files

11.

AsyncAPI npm packages infected with credential-stealing malware (bleepingcomputer.com)

2026-07-15 | tags: asyncapi, attacker, files

12.

Boston Dynamics tests Spot as a delivery assistant that carries packages (techspot.com)

2026-07-15 | by Rob Thubron | tags: boston, boston dynamics, delivery

13.

Forget typosquatting; slopsquatting is the software supply chain threat created by AI coding tools (venturebeat.com)

2026-07-11 | tags: code, hallucinated, hallucinations

14.

Fake Paysafe, Skrill SDKs on NPM and PyPi steal credentials (bleepingcomputer.com)

2026-07-08 | get Cybersecurity Credential Protection Kit → | tags: npm paysafe, packages, paysafe

15.

Malicious PyPI packages give hackers control of Telegram bot servers (bleepingcomputer.com)

2026-06-30 | get PyPI Security Scanner → | tags: pyrogram, telegram, pypi

16.

A startup taught humanoid robots to retrieve packages, climb stairs, and unpack boxes – no human steering needed (techspot.com)

2026-06-30 | get Boston Dynamics Spot Robot → | tags: flexion robotics, humanoid robots, nvidia

17.

Too many R packages: CRAN is inundated with submissions (news.ycombinator.com)

2026-06-24 | by Joseph Rickert | get RStudio Package Management Tool → | tags: cran, r packages, statistical knowledge

18.

Microsoft links Mastra AI supply chain attack to North Korean hackers (bleepingcomputer.com)

2026-06-20 | get Cybersecurity Software Suite → | tags: mastra ai, sapphire sleet, npm packages

19.

Kaspersky finds malware hidden in Steam Wallpaper Engine that hijacks accounts to spread itself — dozens of malicious packages downloaded tens of thousands of times (tomshardware.com)

2026-06-18 | by Luke James | get Steam Wallpaper Engine Malware Protection → | tags: kaspersky, steam, wallpaper engine

20.

I tried AnduinOS 2.0, and it may be the easiest way to ditch Windows for Linux (zdnet.com)

2026-06-16 | by Jack Wallen | get Ubuntu Desktop 24.04 → | tags: anduinos, linux, aiursoft

21.

Arch Linux Malware Incident: Malicious Commits Found in 1,579 Packages (slashdot.org)

2026-06-13 | by Posted | get Arch Linux Package Security Guide → | tags: arch linux, aur, malware

22.

Arch Linux Now Believes Malware Incident Under Control: More Than 1,500 Packages (news.ycombinator.com)

2026-06-13 | get Arch Linux Package Management Book → | tags: arch linux, malware, phoronix test suite

23.

Over 400 Arch Linux packages compromised to push rootkit, infostealer (bleepingcomputer.com)

2026-06-12 | get Arch Linux Package Security Kit → | tags: arch, atomic, atomic lockfile

24.

New malware campaign tricks AI scanners with fake nuclear weapon prompts — malicious code triggers safety failsafes so scanners skip the payload (tomshardware.com)

2026-06-12 | by Bruno Ferreira | get AI Security Scanner Tool → | tags: code, malware, packages

25.

AUR packages compromised with Infostealer and Rootkit (news.ycombinator.com)

2026-06-12 | get Linux Security Toolkit → | tags: compromise, maintainer, malicious

26.

AUR Packages Compromised with Infostealer and Rootkit (news.ycombinator.com)

2026-06-12 | get Linux Security Toolkit → | tags: arch, compromise, npm package

27.

For the 2nd time in weeks, Microsoft packages laced with credential stealer (arstechnica.com)

2026-06-08 | get Microsoft Defender Antivirus → | tags: attack, compromise, github

28.

New Shai-Hulud attack trojanizes 19 science-focused PyPI packages (bleepingcomputer.com)

2026-06-08 | get PyPI Package Security Scanner → | tags: github, hulud, packages

29.

Ruby Fights Supply-Chain Attacks With Filter Offering 'Cooldown' Before Installing New Packages (slashdot.org)

2026-06-08 | by Posted | get RubyGems Package Manager → | tags: cooldown, mandatory, public

30.

Why roaming packages are an anachronism in the digital age (androidauthority.com)

2026-06-05 | get International SIM Card → | tags: esim, mobile, roaming