GoKawiil - Latest Tech News & Aggregated Headlines

Firefox-patch-bin, librewolf-fix-bin AUR packages contain malware

news.ycombinator.com Unknown 2025-07-18 22:48:48

On the 16th of July, at around 8pm UTC+2, a malicious AUR package was uploaded to the AUR. Two other malicious packages were uploaded by the same user a few hours later. These packages were installing a script coming from the same GitHub repository that was identified as a Remote Access Trojan (RAT). The affected malicious packages are: - librewolf-fix-bin - firefox-patch-bin - zen-browser-patched-bin The Arch Linux team addressed the issue as soon as they became aware of the situation. As of to

Topics: aur bin malicious packages uploaded

Shop Amazon

North Korean XORIndex malware hidden in 67 malicious npm packages

bleepingcomputer.com Unknown 2025-07-25 22:47:09

North Korean threat actors planted 67 malicious packages in the Node Package Manager (npm) online repository to deliver a new malware loader called XORIndex to developer systems. The packages collectively count more than 17,000 downloads and were discovered by researchers at package security platform Socket, who assess them to be part of the continued Contagious Interview operation. Socket researchers say that the campaign follows threat activity detected since April. Last month, the same acto

Topics: loader malware npm packages researchers

Shop Amazon

Solving Wordle with uv's dependency resolver

news.ycombinator.com Unknown 2025-08-07 06:28:30

Introduction In a previous life, I wrote a Sudoku solver that relied on Poetry's dependency resolver. We ended up selling that startup to EDB (not because of the Poetry hack), which means that they now own this IP. And, since then, Python packaging has advanced, with uv taking the world by storm. This means that it's time for a refresh. Can we use uv instead of Poetry? And can we solve a Wordle instead of a Sudoku? For the impatient: you can get the solver from my GitHub. Run uv run main.py r

Topics: letter package packages position version

Shop Amazon

Got a suspicious UPS text? Don't reply - it might be a scam. Here's how to tell

zdnet.com Lance Whitney 2025-08-18 02:13:00

Elyse Betters Picaro / ZDNET I've been anxiously expecting a package from UPS. That's why a text I received the other day caught my eye. Claiming to be from UPS, the message said that the carrier attempted to deliver the package on June 27, but the delivery couldn't be completed. The date was one when my wife and I were away, so this seemed legitimate at first glance. Also: Got a suspicious E-ZPass text? Don't click the link (and what to do if you already did) However, I've written plenty of

Topics: message package scams text ups

Shop Amazon

Ubuntu: Introducing Debcrafters

news.ycombinator.com Unknown 2025-08-20 00:42:43

Earlier this year, Canonical’s Ubuntu Engineering organisation gained a new team, seeded with some of our most prolific contributors to Ubuntu. Debcrafters is a new team dedicated to the maintenance of the Ubuntu Archive. The team’s primary goal is to maintain the health of the Ubuntu Archive, but its unique construction aims to attract a broad range of Linux distribution expertise; contributors to distributions like Debian, Arch Linux, NixOS and others are encouraged to join the team, and will

Topics: archive debcrafters packages team ubuntu

Shop Amazon

Why Go Rocks for Building a Lua Interpreter

news.ycombinator.com Roxy Light 2025-08-17 12:28:01

By Roxy Light I recently needed to build a custom Lua interpreter in Go. The exact reasons aren’t important for this blog post, but neither the reference implementation — which I will be referring to as “C Lua” throughout this article — nor the other open source Go Lua intepreters I could find were a good fit for my needs. Building a Lua interpreter ended up being a rather enjoyable months-long side quest. I’ve had a number of folks ask me to write about the experience since these sorts of proj

Topics: interpreter lua package type value

Shop Amazon

uv: An extremely fast Python package and project manager, written in Rust

news.ycombinator.com Unknown 2025-08-31 05:27:25

uv An extremely fast Python package and project manager, written in Rust. Installing Trio's dependencies with a warm cache. Highlights uv is backed by Astral, the creators of Ruff. Installation Install uv with our standalone installers: # On macOS and Linux. curl -LsSf https://astral.sh/uv/install.sh | sh # On Windows. powershell -ExecutionPolicy ByPass -c " irm https://astral.sh/uv/install.ps1 | iex " Or, from PyPI: # With pip. pip install uv # Or pipx. pipx install uv If installed

Topics: example install packages python uv

Shop Amazon

Latest Tech News

Firefox-patch-bin, librewolf-fix-bin AUR packages contain malware

North Korean XORIndex malware hidden in 67 malicious npm packages

Solving Wordle with uv's dependency resolver

Got a suspicious UPS text? Don't reply - it might be a scam. Here's how to tell

Ubuntu: Introducing Debcrafters

Why Go Rocks for Building a Lua Interpreter

uv: An extremely fast Python package and project manager, written in Rust

About GoKawiil

Privacy

Advertising

Latest Tech News

Firefox-patch-bin, librewolf-fix-bin AUR packages contain malware

North Korean XORIndex malware hidden in 67 malicious npm packages

Solving Wordle with uv's dependency resolver

Got a suspicious UPS text? Don't reply - it might be a scam. Here's how to tell

Ubuntu: Introducing Debcrafters

Why Go Rocks for Building a Lua Interpreter

uv: An extremely fast Python package and project manager, written in Rust

Trending Topics

Hot Now

Popular

Emerging

About GoKawiil

Privacy

Advertising