GoKawiil - Tech News

1.

GitHub, PyPI add time-based defenses against supply chain attacks (bleepingcomputer.com)

2026-07-26 | tags: github, pypi, dependabot

2.

LLM Usage in Debian: Three Proposals (news.ycombinator.com)

2026-07-25 | tags: debian, large language models, lintian

3.

Forget typosquatting; slopsquatting is the software supply chain threat created by AI coding tools (venturebeat.com)

2026-07-11 | tags: code, hallucinated, hallucinations

4.

Fake Paysafe, Skrill SDKs on NPM and PyPi steal credentials (bleepingcomputer.com)

2026-07-08 | tags: npm paysafe, packages, paysafe

5.

Too many R packages: CRAN is inundated with submissions (news.ycombinator.com)

2026-06-24 | by Joseph Rickert | get RStudio Package Management Tool → | tags: cran, r packages, statistical knowledge

6.

Microsoft links Mastra AI supply chain attack to North Korean hackers (bleepingcomputer.com)

2026-06-20 | get Cybersecurity Software Suite → | tags: mastra ai, sapphire sleet, npm packages

7.

I tried AnduinOS 2.0, and it may be the easiest way to ditch Windows for Linux (zdnet.com)

2026-06-16 | by Jack Wallen | get Ubuntu Desktop 24.04 → | tags: anduinos, linux, aiursoft

8.

New malware campaign tricks AI scanners with fake nuclear weapon prompts — malicious code triggers safety failsafes so scanners skip the payload (tomshardware.com)

2026-06-12 | by Bruno Ferreira | get AI Security Scanner Tool → | tags: code, malware, packages

9.

AUR packages compromised with Infostealer and Rootkit (news.ycombinator.com)

2026-06-12 | get Linux Security Toolkit → | tags: compromise, maintainer, malicious

10.

AUR Packages Compromised with Infostealer and Rootkit (news.ycombinator.com)

2026-06-12 | get Linux Security Toolkit → | tags: arch, compromise, npm package

11.

New Shai-Hulud attack trojanizes 19 science-focused PyPI packages (bleepingcomputer.com)

2026-06-08 | get PyPI Package Security Scanner → | tags: github, hulud, packages

12.

Red Hat npm packages compromised to steal developer credentials (bleepingcomputer.com)

2026-06-01 | get Red Hat Developer Security Kit → | tags: red hat, npm packages, shai-hulud

13.

Malicious npm packages detected across Red Hat Cloud Services (news.ycombinator.com)

2026-06-01 | get Secure npm package scanner → | tags: npm, red hat, malicious packages

14.

NPM packages from RedHat have been compromised (news.ycombinator.com)

2026-06-01 | get Red Hat NPM Security Kit → | tags: npm, redhat, compromised

15.

You can’t buy employee engagement. Here’s what to do instead (feeds.feedburner.com)

2026-05-29 | get Employee Engagement Book → | tags: employee engagement, remuneration packages, industry standards

16.

Show HN: AISlop, a CLI for catching AI generated code smells (news.ycombinator.com)

2026-05-29 | get AI Code Quality Scanner → | tags: aislop, claude code, opencode

17.

Booking.com Promo Codes: 20% Off | May 2026 (wired.com)

2026-05-12 | by Molly Higgins | tags: booking.com, travel discounts, hotel deals

18.

TanStack NPM Packages Compromised (news.ycombinator.com)

2026-05-11 | get TanStack NPM Package Security Kit → | tags: tanstack, npm, packages

19.

Expedia Coupons: 75% Off (wired.com)

2026-05-06 | by Louryn Strampe | tags: expedia, menger hotel, caesars palace

20.

Official SAP npm packages compromised to steal credentials (bleepingcomputer.com)

2026-04-29 | get SAP Security Toolkit → | tags: sap npm packages, teampcp attack, cloud application programming model

21.

Ubuntu's AI roadmap revealed, universal AI 'kill switch' and forced AI integration are not part of the plan — cloud tracking, local inference, and agentic system tools take center stage (tomshardware.com)

2026-04-28 | by Etiido Uko | get Ubuntu AI Developer Kit → | tags: ubuntu, canonical, snap packages

22.

Amazon and U.S. Postal Service Reach Delivery Deal (feeds.content.dowjones.io)

2026-04-06 | get USPS Priority Mail Box → | tags: amazon, usps, delivery

23.

To Lure Top AI Talent, Startups Are Turning to Cold Hard Cash (feeds.content.dowjones.io)

2026-03-30 | get AI Talent Recruitment Kit → | tags: ai talent, startups, equity packages

24.

CanisterWorm malware wipes Iranian machines for no apparent reason — sophisticated attack spreads through npm packages and uses ICP canister as control surface (tomshardware.com)

2026-03-26 | by Bruno Ferreira | get Malware Removal Toolkit → | tags: canisterworm, npm packages, teampcp

25.

Trivy Supply Chain Attack Spreads, Triggers Self-Spreading CanisterWorm Across 47 npm Packages (slashdot.org)

2026-03-22 | by Posted | get Trivy Vulnerability Scanner → | tags: trivy, supply chain attack, npm packages

26.

Amazon acquires startup Rivr to test robots for 'doorstep delivery' (cnbc.com)

2026-03-19 | by Annie Palmer | get Rivr Delivery Robot → | tags: amazon, delivery, operations

27.

Amazon Plans Drastic Cut in Packages Sent Via Already-Struggling USPS (feeds.content.dowjones.io)

2026-03-17 | get Smart USPS Package Scale → | tags: amazon, usps, postal volume

28.

Amazon Plans Drastic Cut in Packages It Sends Through the Post Office (feeds.content.dowjones.io)

2026-03-17 | get Smart Post Office Package Locker → | tags: amazon, post office, e-commerce

29.

Oracle Allocates Extra $500 Million to Cover Restructuring Costs (feeds.content.dowjones.io)

2026-03-13 | get Oracle Restructuring Guidebook → | tags: oracle, ai models, redundancy packages

30.

Elderly Woman Bombarded With Over a Hundred Amazon Packages She Didn’t Order (gizmodo.com)

2026-03-02 | get Amazon Prime Package → | tags: amazon packages, elderly woman, amazon