Show HN: Ez FFmpeg – Video editing in plain English
I built a CLI tool that lets you do common video/audio operations without remembering ffmpeg syntax. Instead of: ffmpeg -i…
npm
Show HN: Vibium – Browser automation for AI and humans, by Selenium’s creator
Vibium Browser automation without the drama. Vibium is browser automation infrastructure built for AI agents. A single binary handles browser…
NPM Package with 56K Downloads Caught Stealing WhatsApp Messages
BackKoi ResearchNPM Package With 56K Downloads Caught Stealing WhatsApp MessagesTuval Admoni,,December 21, 2025IntroThe lotusbail npm package presents itself as a…
Shai-Hulud Returns: Over 300 NPM Packages Infected
Read more on Hacker News
MCP stacks have a 92% exploit probability: How 10 plugins became enterprise security’s biggest blind spot
The same connectivity that made Anthropic's Model Context Protocol (MCP) the fastest-adopted AI integration standard in 2025 has created enterprise…
just nuked 120+ unused npm deps from a huge Nx monorepo
Interesting discussion from Reddit Programming community. Read more on Reddit Programming
Self Propagating NPM Malware Compromises over 40 Packages
Back to Blog Newsctrl/tinycolor and 40+ NPM Packages CompromisedThe popular @ctrl/tinycolor package with over 2 million weekly downloads has been…
I still love PHP and JavaScript
Why I Still Love PHP and Javascript After 20+ years 01 Aug, 2022 Over the last twenty years, I have…
We All Dodged a Bullet
We all dodged a bullet Published on 2025-09-09, 971 words, 4 minutes to read That NPM attack could have been…
Software packages with more than 2 billion weekly downloads hit in supply-chain attack
Text settings Story text Size Small Standard Large Width * Standard Wide Links Standard Orange * Subscribers only Learn more…
Nx compromised: malware uses Claude code CLI to explore the filesystem
At least 1.4k people are learning today that they have a new repository prefixed by s1ngularity-repository in their GitHub account….
Malicious versions of Nx and some supporting plugins were published
nrwl / nx Public Notifications You must be signed in to change notification settings Fork 2.6k Star 26.8k Malicious versions…
VC-backed company just killed my EU trademark for a small OSS project
I run a small open-source project Deepkit (Trademark 017875717) I've been building for many years. It's not huge, just a…
Crush: The glamourous AI coding agent for your favourite terminal
Crush Your new coding bestie, now available in your favourite terminal.Your tools, your code, and your workflows, wired into your…