GoKawiil - Tech News

31.

NPM flooded with malicious packages downloaded more than 86k times (news.ycombinator.com)

2025-10-31 | related products | tags: code, dependencies, koi

32.

Malicious NPM packages fetch infostealer for Windows, Linux, macOS (bleepingcomputer.com)

2025-10-31 | related products | tags: information, js, legitimate

33.

NPM flooded with malicious packages downloaded more than 86,000 times (arstechnica.com)

2025-10-31 | related products | tags: code, dependencies, koi

34.

PhantomRaven attack floods npm with credential-stealing packages (bleepingcomputer.com)

2025-10-31 | related products | tags: koi, npm, packages

35.

React Flow, open source libraries for node-based UIs with React or Svelte (news.ycombinator.com)

2025-10-31 | related products | tags: flow, packages, react

36.

PyOCI – Publish and install private Python packages using OCI/Docker registries (news.ycombinator.com)

2025-10-31 | related products | tags: oci, package, packages

37.

Cleaning house in Nx monorepo, how i removed unused deps safely (news.ycombinator.com)

2025-10-31 | related products | tags: config, knip, nx

38.

If all the world were a monorepo (news.ycombinator.com)

2025-10-31 | related products | tags: cran, package, packages

39.

Tinycolor supply chain attack post-mortem (news.ycombinator.com)

2025-10-31 | by Scott Cooper | related products | tags: github, malicious, npm

40.

CrowdStrike Infested With "Self-Replicating Worms" (futurism.com)

2025-10-31 | related products | tags: crowdstrike, infected, npm

41.

Shai-Hulud malware attack: Tinycolor and over 40 NPM packages compromised (news.ycombinator.com)

2025-10-31 | related products | tags: 20, community, github

42.

Live Updates: Shai-Hulud, the Most Dangerous NPM Breach in History (news.ycombinator.com)

2025-10-31 | by Idan Dardikman | related products | tags: github, hulud, npm

43.

Self-propagating supply chain attack hits 187 npm packages (bleepingcomputer.com)

2025-10-31 | related products | tags: attack, chain, compromised

44.

Self-Replicating Worm Hits 180+ Software Packages (krebsonsecurity.com)

2025-10-31 | related products | tags: attack, code, npm

45.

Self Propagating NPM Malware Compromises over 40 Packages (news.ycombinator.com)

2025-10-31 | related products | tags: aws, github, npm

46.

Which NPM package has the largest version number? (news.ycombinator.com)

2025-10-31 | related products | tags: const, number, package

47.

Hackers left empty-handed after massive NPM supply-chain attack (bleepingcomputer.com)

2025-10-31 | related products | tags: attack, cloud, environments

48.

This 2FA phishing scam pwned a developer - and endangered billions of npm downloads (zdnet.com)

2025-10-31 | by Charlie Osborne | related products | tags: email, junon, npm

49.

Massive Supply Chain Attack Targets Cryptocurrencies Through NPM (gizmodo.com)

2025-10-31 | by Lucas Ropek | related products | tags: account, junon, npm

50.

Software packages with more than 2 billion weekly downloads hit in supply-chain attack (arstechnica.com)

2025-10-31 | related products | tags: code, junon, npm

51.

Nuclear: Desktop music player focused on streaming from free sources (news.ycombinator.com)

2025-10-31 | related products | tags: https, nuclear, org

52.

Show HN: Simple modenized .NET NuGet server reached RC (news.ycombinator.com)

2025-10-31 | related products | tags: json, nuget, package

53.

Much of the World Stops Sending Mail to U.S. (gizmodo.com)

2025-10-31 | by Aj Dellinger | related products | tags: country, packages, policy

54.

This new Arch Linux tool takes the hassle out of keeping packages up to date - here's how (zdnet.com)

2025-10-31 | by Jack Wallen | related products | tags: arch, bumpbuddy, maintainers

55.

Debian 13 "Trixie" (news.ycombinator.com)

2025-10-31 | related products | tags: available, debian, packages

56.

Fake WhatsApp developer libraries hide destructive data-wiping code (bleepingcomputer.com)

2025-10-31 | related products | tags: com, github, malicious

57.

Trump Ends Tariff Exemption for Small Packages (wired.com)

2025-10-31 | by Zeyi Yang | related products | tags: minimis, packages, shipments

58.

Supply-chain attacks on open source software are getting out of hand (arstechnica.com)

2025-10-31 | related products | tags: attack, github, npm

59.

Open source repositories are seeing a rash of supply-chain attacks (arstechnica.com)

2025-10-31 | related products | tags: attack, github, npm

60.

Hackers breach Toptal GitHub account, publish malicious npm packages (bleepingcomputer.com)

2025-10-31 | related products | tags: github, malicious, packages