GoKawiil - Tech News

1.

The three pillars of JavaScript bloat (news.ycombinator.com)

2026-03-22 | get JavaScript Performance Optimization Kit → | tags: npm, dependency bloat, node.js

2.

The Three Pillars of JavaScript Bloat (news.ycombinator.com)

2026-03-22 | get JavaScript Performance Optimization Book → | tags: npm, dependency bloat, node.js

3.

Trivy Supply Chain Attack Spreads, Triggers Self-Spreading CanisterWorm Across 47 npm Packages (slashdot.org)

2026-03-22 | by Posted | get Trivy Vulnerability Scanner → | tags: trivy, supply chain attack, npm packages

4.

GlassWorm malware hits 400+ code repos on GitHub, npm, VSCode, OpenVSX (bleepingcomputer.com)

2026-03-17 | get GitHub Security Scanner Tool → | tags: glassworm, github, vscode

5.

GlassWorm Malware Evolves to Hide in Dependencies (darkreading.com)

2026-03-16 | by Alexander Culafi | get Dependency Scanner Tool → | tags: glassworm, open vsx, npm

6.

Glassworm is back: A new wave of invisible Unicode attacks hits repositories (news.ycombinator.com)

2026-03-15 | by Start Today | get Unicode Security Scanner → | tags: glassworm, github, unicode

7.

Glassworm Is Back: A New Wave of Invisible Unicode Attacks Hits Repositories (news.ycombinator.com)

2026-03-15 | by Start Today | get Unicode Security Scanner → | tags: glassworm, github, npm

8.

Invisible malicious code attacks 151 GitHub repos and VS Code — Glassworm attack uses blockchain to steal tokens, credentials, and secrets (tomshardware.com)

2026-03-14 | by Luke James | get GitHub Security Scanner → | tags: github, glassworm, solana

9.

Supply-chain attack using invisible code hits GitHub and other repositories (arstechnica.com)

2026-03-13 | get GitHub Security Monitoring Tool → | tags: github, npm, aikido security

10.

Vite 8.0 Is Out (news.ycombinator.com)

2026-03-13 | get Vite 8.0 Development Kit → | tags: vite, rollup, rolldown

11.

Show HN: Rudel – Claude Code Session Analytics (news.ycombinator.com)

2026-03-12 | get Analytics → | tags: bun, rudel, claudocode

12.

Secure Secrets Management for Cursor Cloud Agents (news.ycombinator.com)

2026-03-10 | get Cloud Security Manager → | tags: ubuntu, github, cursor

13.

If It Quacks Like a Package Manager (news.ycombinator.com)

2026-03-08 | by Andrew Nesbitt | get Package Manager → | tags: github actions, npm, rust

14.

TypeScript 6.0 RC (news.ycombinator.com)

2026-03-06 | by Daniel Rosenwasser | get TypeScript 6.0 → | tags: typescript, npm, typescript 6.0

15.

A GitHub Issue Title Compromised 4k Developer Machines (news.ycombinator.com)

2026-03-05 | get GitHub Issue → | tags: clinejection, snyk, npm

16.

Google Workspace CLI (news.ycombinator.com)

2026-03-05 | get Google Workspace CLI → | tags: gws, google workspace, npm

17.

Show HN: Gapless.js – gapless web audio playback (news.ycombinator.com)

2026-03-02 | get Gapless.js → | tags: xstate, web audio api, gapless

18.

A rabbit hole in 5 commits (news.ycombinator.com)

2026-03-02 | by Jesse Skinner | get GitHub → | tags: rust, npm, unsplash

19.

LLM=True (news.ycombinator.com)

2026-02-25 | get Artificial Intelligence → | tags: typescript, turbo, rust

20.

Pi – A minimal terminal coding harness (news.ycombinator.com)

2026-02-24 | get Terminal → | tags: npm, pi-coding-agent, typescript

21.

Pi – a minimal terminal coding harness (news.ycombinator.com)

2026-02-24 | get Terminal → | tags: npm, pi-coding-agent, typescript

22.

I'm helping my dog vibe code games (news.ycombinator.com)

2026-02-24 | by Caleb Leak | get Code → | tags: rust, godot, npm

23.

NPM install is stealing your passwords – I built a tool to catch it (news.ycombinator.com)

2026-02-24 | get Password Manager → | tags: npm, shai-hulud, tj-actions

24.

Supply Chain Attack Secretly Installs OpenClaw for Cline Users (darkreading.com)

2026-02-19 | get OpenClaw → | tags: cline, cline npm, downloaded

25.

I Don't Like Magic (news.ycombinator.com)

2026-02-18 | by Jeremy Keith | get Magic Wand → | tags: rust, npm, session

26.

NPMX – a fast, modern browser for the NPM registry (news.ycombinator.com)

2026-02-14 | get NPMX Browser → | tags: affiliated, affiliated npm, browser

27.

Two new RSC protocol vulnerabilities uncovered (news.ycombinator.com)

2025-12-11 | get OpenSSL → | tags: canary, canary canary, install

28.

Show HN: Safe-NPM – only install packages that are +90 days old (news.ycombinator.com)

2025-11-23 | get Package Manager → | tags: install, npm install, package

29.

NPM flooded with malicious packages downloaded more than 86k times (news.ycombinator.com)

2025-10-31 | get art supplies → | tags: code, dependencies, koi

30.

Malicious NPM packages fetch infostealer for Windows, Linux, macOS (bleepingcomputer.com)

2025-10-31 | get wifi router → | tags: information, js, legitimate