GoKawiil - Tech News

1.

NPM flooded with malicious packages downloaded more than 86k times (news.ycombinator.com)

2025-10-31 | related products | tags: code, dependencies, koi

2.

Malicious NPM packages fetch infostealer for Windows, Linux, macOS (bleepingcomputer.com)

2025-10-31 | related products | tags: information, js, legitimate

3.

NPM flooded with malicious packages downloaded more than 86,000 times (arstechnica.com)

2025-10-31 | related products | tags: code, dependencies, koi

4.

PhantomRaven attack floods npm with credential-stealing packages (bleepingcomputer.com)

2025-10-31 | related products | tags: koi, npm, packages

5.

Vite+ – The Unified Toolchain for the Web (news.ycombinator.com)

2025-10-31 | related products | tags: built, downloads, github

6.

Unofficial Postmark MCP npm silently stole users' emails (bleepingcomputer.com)

2025-10-31 | related products | tags: koi, mcp, npm

7.

Show HN: Tips to stay safe from NPM supply chain attacks (news.ycombinator.com)

2025-10-31 | related products | tags: deno, dependencies, https

8.

5 ways to spot software supply chain attacks and stop worms - before it's too late (zdnet.com)

2025-10-31 | by Steven Vaughan-Nichols | related products | tags: chain, npm, security

9.

Pnpm has a new setting to stave off supply chain attacks (news.ycombinator.com)

2025-10-31 | by Zoltan Kochan | related products | tags: dependencies, finder, license

10.

Tinycolor supply chain attack post-mortem (news.ycombinator.com)

2025-10-31 | by Scott Cooper | related products | tags: github, malicious, npm

11.

Oh no, not again a meditation on NPM supply chain attacks (news.ycombinator.com)

2025-10-31 | related products | tags: microsoft, npm, run

12.

CrowdStrike Infested With "Self-Replicating Worms" (futurism.com)

2025-10-31 | related products | tags: crowdstrike, infected, npm

13.

Shai-Hulud malware attack: Tinycolor and over 40 NPM packages compromised (news.ycombinator.com)

2025-10-31 | related products | tags: 20, community, github

14.

Live Updates: Shai-Hulud, the Most Dangerous NPM Breach in History (news.ycombinator.com)

2025-10-31 | by Idan Dardikman | related products | tags: github, hulud, npm

15.

Self-propagating supply chain attack hits 187 npm packages (bleepingcomputer.com)

2025-10-31 | related products | tags: attack, chain, compromised

16.

Self-Replicating Worm Hits 180+ Software Packages (krebsonsecurity.com)

2025-10-31 | related products | tags: attack, code, npm

17.

Self Propagating NPM Malware Compromises over 40 Packages (news.ycombinator.com)

2025-10-31 | related products | tags: aws, github, npm

18.

This 2FA phishing scam pwned a developer - and endangered billions of npm downloads (zdnet.com)

2025-10-31 | by Charlie Osborne | related products | tags: email, junon, npm

19.

Massive Supply Chain Attack Targets Cryptocurrencies Through NPM (gizmodo.com)

2025-10-31 | by Lucas Ropek | related products | tags: account, junon, npm

20.

Software packages with more than 2 billion weekly downloads hit in supply-chain attack (arstechnica.com)

2025-10-31 | related products | tags: code, junon, npm

21.

AGENTS.md – Open format for guiding coding agents (news.ycombinator.com)

2025-10-31 | related products | tags: package, pnpm, project_name

22.

Show HN: I've been building an ERP for manufacturing for the last 3 years (news.ycombinator.com)

2025-10-31 | related products | tags: api, carbon, database

23.

Supply-chain attacks on open source software are getting out of hand (arstechnica.com)

2025-10-31 | related products | tags: attack, github, npm

24.

Open source repositories are seeing a rash of supply-chain attacks (arstechnica.com)

2025-10-31 | related products | tags: attack, github, npm

25.

NPM package ‘is’ with 2.8M weekly downloads infected devs with malware (bleepingcomputer.com)

2025-10-31 | related products | tags: attack, compromised, malware

26.

npm 'accidentally' removes Stylus package, breaks builds and pipelines (bleepingcomputer.com)

2025-10-31 | related products | tags: npm, npmjs, package

27.

Popular npm linter packages hijacked via phishing to drop malware (bleepingcomputer.com)

2025-10-31 | related products | tags: eslint, maintainer, npm

28.

North Korean XORIndex malware hidden in 67 malicious npm packages (bleepingcomputer.com)

2025-10-31 | related products | tags: loader, malware, npm