GoKawiil - Tech News

1.

Introducing architecture variants (news.ycombinator.com)

2025-10-31 | related products | tags: 64, apt, packages

2.

NPM flooded with malicious packages downloaded more than 86k times (news.ycombinator.com)

2025-10-31 | related products | tags: code, dependencies, koi

3.

Malicious NPM packages fetch infostealer for Windows, Linux, macOS (bleepingcomputer.com)

2025-10-31 | related products | tags: information, js, legitimate

4.

NPM flooded with malicious packages downloaded more than 86,000 times (arstechnica.com)

2025-10-31 | related products | tags: code, dependencies, koi

5.

PhantomRaven attack floods npm with credential-stealing packages (bleepingcomputer.com)

2025-10-31 | related products | tags: koi, npm, packages

6.

Tesla risks losing CEO Musk if $1 trillion pay package isn't approved, board chair says (cnbc.com)

2025-10-31 | by Chris Eudaily | related products | tags: company, musk, package

7.

React Flow, open source libraries for node-based UIs with React or Svelte (news.ycombinator.com)

2025-10-31 | related products | tags: flow, packages, react

8.

UPS Is Destroying Packages Stuck in Trump’s Tariff Chaos (gizmodo.com)

2025-10-31 | by Matt Novak | related products | tags: destroyed, package, tariffs

9.

Being blocked from contributing to lodash (news.ycombinator.com)

2025-10-31 | related products | tags: github, lodash, open

10.

PyOCI – Publish and install private Python packages using OCI/Docker registries (news.ycombinator.com)

2025-10-31 | related products | tags: oci, package, packages

11.

Cleaning house in Nx monorepo, how i removed unused deps safely (news.ycombinator.com)

2025-10-31 | related products | tags: config, knip, nx

12.

Unofficial Postmark MCP npm silently stole users' emails (bleepingcomputer.com)

2025-10-31 | related products | tags: koi, mcp, npm

13.

NPM package caught using QR Code to fetch cookie-stealing malware (bleepingcomputer.com)

2025-10-31 | related products | tags: code, codes, malicious

14.

Show HN: Tips to stay safe from NPM supply chain attacks (news.ycombinator.com)

2025-10-31 | related products | tags: deno, dependencies, https

15.

If all the world were a monorepo (news.ycombinator.com)

2025-10-31 | related products | tags: cran, package, packages

16.

Tinycolor supply chain attack post-mortem (news.ycombinator.com)

2025-10-31 | by Scott Cooper | related products | tags: github, malicious, npm

17.

CrowdStrike Infested With "Self-Replicating Worms" (futurism.com)

2025-10-31 | related products | tags: crowdstrike, infected, npm

18.

Shai-Hulud malware attack: Tinycolor and over 40 NPM packages compromised (news.ycombinator.com)

2025-10-31 | related products | tags: 20, community, github

19.

Live Updates: Shai-Hulud, the Most Dangerous NPM Breach in History (news.ycombinator.com)

2025-10-31 | by Idan Dardikman | related products | tags: github, hulud, npm

20.

Self-propagating supply chain attack hits 187 npm packages (bleepingcomputer.com)

2025-10-31 | related products | tags: attack, chain, compromised

21.

Self-Replicating Worm Hits 180+ Software Packages (krebsonsecurity.com)

2025-10-31 | related products | tags: attack, code, npm

22.

Self Propagating NPM Malware Compromises over 40 Packages (news.ycombinator.com)

2025-10-31 | related products | tags: aws, github, npm

23.

Which NPM package has the largest version number? (news.ycombinator.com)

2025-10-31 | related products | tags: const, number, package

24.

Tesla board chair calls debate over Elon Musk’s $1T pay package ‘a little bit weird’ (techcrunch.com)

2025-10-31 | by Anthony Ha | related products | tags: compensation, denholm, musk

25.

Behind the scenes of Bun Install (news.ycombinator.com)

2025-10-31 | related products | tags: bun, data, file

26.

Behind the Scenes of Bun Install (news.ycombinator.com)

2025-10-31 | related products | tags: bun, data, file

27.

Hackers left empty-handed after massive NPM supply-chain attack (bleepingcomputer.com)

2025-10-31 | related products | tags: attack, cloud, environments

28.

This 2FA phishing scam pwned a developer - and endangered billions of npm downloads (zdnet.com)

2025-10-31 | by Charlie Osborne | related products | tags: email, junon, npm

29.

Massive Supply Chain Attack Targets Cryptocurrencies Through NPM (gizmodo.com)

2025-10-31 | by Lucas Ropek | related products | tags: account, junon, npm

30.

Software packages with more than 2 billion weekly downloads hit in supply-chain attack (arstechnica.com)

2025-10-31 | related products | tags: code, junon, npm