Search: socket.dev | Heykuki News

HK

Heykuki News

Top New Best Ask Show Jobs

Top New Best Ask Show Jobs

151.

Gmail for Exfiltration: Malicious NPM Packages Target Solana Private Keys and

a year ago

4 points

152.

Quasar Rat Disguised as an NPM Package for Detecting Vulnerabilities in Ethereum

2 years ago

4 points

153.

The Business of Ransomware: Insights from Reddit AMA with Ransomware

2 years ago

4 points

154.

Malicious NPM Packages Inject SSH Backdoors via Typosquatted Libraries

2 years ago

4 points

155.

ESLint Is Now Language-Agnostic: Linting JSON, Markdown, and Beyond

2 years ago

4 points

156.

NIST Misses 2024 Deadline to Clear NVD Backlog

2 years ago

4 points

157.

3.7M Fake GitHub Stars: A Growing Threat Linked to Scams and Malware

2 years ago

4 points

158.

Understanding the Risks of Trivial Packages in Modern Software Projects

2 years ago

4 points

159.

Pnpm 9.5 Introduces Catalogs: Shareable Dependency Version Specifiers

2 years ago

4 points

160.

OpenSSF Warns of Reputation Farming Leveraging Closed GitHub Issues and PRs

2 years ago

4 points

161.

Python Software Foundation Announces 5-Year Sponsorship Commitment from Fastly

2 years ago

4 points

162.

2 years ago

4 points

163.

JSR Now in Public Beta, Aims to Shift Community Towards Using ESM Modules

2 years ago

4 points

164.

Hackers are using package managers as vectors for deploying coinminer malware

2 years ago

4 points

165.

When "Everything" Becomes Too Much: The NPM Package Chaos of 2024

2 years ago

4 points

166.

“Safe NPM” – NPM wrapper to protect developers from malware

3 years ago

4 points

167.

NPM 'bin' script confusion can override NPM/node commands

4 years ago

4 points

168.

Attackers Are Hunting High-Impact Node.js Maintainers with Social Engineering

3 months ago

3 points

169.

Socket secures $40M to combat next-generation software supply chain attacks

2 years ago

3 points

170.

AI Has Taken over Open Source

a month ago

3 points

171.

Axios Supply Chain Attack Reaches OpenAI macOS Signing Pipeline

2 months ago

3 points

172.

Trivy Under Attack Again: Widespread GitHub Actions Tag Compromise Exposes

3 months ago

3 points

173.

Temporal API Ships in Chrome 144, Marking a Major Shift for JavaScript Date

5 months ago

3 points

174.

Tailwind CSS Announces 75% Layoffs as LLMs Reshape OSS Business Models

5 months ago

3 points

175.

NPM Revokes Classic Tokens, as OpenJS Warns Maintainers About OIDC Gaps

6 months ago

3 points

176.

Shai-Hulud Strikes Again, Again. (NPM Supply Chain Attack)

7 months ago

3 points

177.

Ruby Core Team Assumes Stewardship of RubyGems and Bundler, Former Maintainers

8 months ago

3 points

178.

Package Maintainers Call for Improvements to GitHub's New NPM Security Plan

9 months ago

3 points

179.

Rv Is a New Rust-Powered Ruby Version Manager Inspired by Python's Uv

10 months ago

3 points

180.

Nx NPM Packages Compromised in Supply Chain Attack Weaponizing AI CLI Tools

10 months ago

3 points