Shai-Hulud Returns: Over 300 NPM Packages Infected
Read more on Hacker News
npm
MCP stacks have a 92% exploit probability: How 10 plugins became enterprise security’s biggest blind spot
The same connectivity that made Anthropic's Model Context Protocol (MCP) the fastest-adopted AI integration standard in 2025 has created enterprise…
just nuked 120+ unused npm deps from a huge Nx monorepo
Interesting discussion from Reddit Programming community. Read more on Reddit Programming
Self Propagating NPM Malware Compromises over 40 Packages
Back to Blog Newsctrl/tinycolor and 40+ NPM Packages CompromisedThe popular @ctrl/tinycolor package with over 2 million weekly downloads has been…
I still love PHP and JavaScript
Why I Still Love PHP and Javascript After 20+ years 01 Aug, 2022 Over the last twenty years, I have…
We All Dodged a Bullet
We all dodged a bullet Published on 2025-09-09, 971 words, 4 minutes to read That NPM attack could have been…
Software packages with more than 2 billion weekly downloads hit in supply-chain attack
Text settings Story text Size Small Standard Large Width * Standard Wide Links Standard Orange * Subscribers only Learn more…
Nx compromised: malware uses Claude code CLI to explore the filesystem
At least 1.4k people are learning today that they have a new repository prefixed by s1ngularity-repository in their GitHub account….
Malicious versions of Nx and some supporting plugins were published
nrwl / nx Public Notifications You must be signed in to change notification settings Fork 2.6k Star 26.8k Malicious versions…
VC-backed company just killed my EU trademark for a small OSS project
I run a small open-source project Deepkit (Trademark 017875717) I've been building for many years. It's not huge, just a…
Crush: The glamourous AI coding agent for your favourite terminal
Crush Your new coding bestie, now available in your favourite terminal.Your tools, your code, and your workflows, wired into your…