Tootfinder

»Over 67,000 Fake npm Packages Flood Registry in Worm-Like Spam Attack:
Cybersecurity researchers are calling attention to a large-scale spam campaign that has flooded the npm registry with thousands of fake packages since early 2024 as part of a likely financially motivated effort.«
How do you check if the JavaScript libraries and their libraries on which they are based are now safe?!??
🧑‍💻

Over 46,000 Fake npm Packages Flood Registry in Worm-Like Spam Attack
A mysterious npm worm published 46K fake packages in a two-year spam campaign, exposing major security gaps.

python_dependency: Python Dependency Network
Python's package dependency networks. Nodes in the network are Python's packages registered to PyPI and edges are dependencies among packages.
This network has 58743 nodes and 108399 edges.
Tags: Technological, Software, Unweighted
https://networks.sk…

suricata 8.0.3 out in AUR: #suricata #archlinux

Currently watching the #Psychostick Christmas live stream. Great comedy metal songs and a bunch of fun. https://www.youtube.com/live/-bNSuC0Ezow

Maybe a good opportunity to illustrate the purpose of one of the more uncommon packages in #ThingUmbrella: The https://thi.ng/hex package provides hexadecimal formatters for a variety of word sizes (4-64 bits) and also a…

Becoming a physicist: Major educational transition points impact women's physics self-efficacy and sense of belonging
Sarah Lindley (University of Pittsburgh), Chandralekha Singh (University of Pittsburgh)
https://arxiv.org/abs/2510.12024

Becoming a physicist: Major educational transition points impact women's physics self-efficacy and sense of belonging
In this investigation, we analyzed individual interviews with six female undergraduate physics majors at a large, public, research university in the US to understand their progression at different transition points to becoming physicists. Following the frameworks of standpoint theory, Schlossberg's transition theory, and domains of power, we focused our analysis on how these women initially developed an interest in physics before coming to college and how important transition points in college …

I've somehow managed to get the Android Studio ide bits to find all the imported packages/classes but the compiler can't. Aka the exact opposite of how life in Eclipse went 20 years ago. Such a troubling toolchain.
Added #Android

bsdinstall: Mount /dev and /packages after using the shell to partition disks
<https://github.com/freebsd/freebsd-src/commit/f63a8c0a0915a3eceac179d4d18b2c03b1319fa2> was a few days after FreeBSD 15.0-RELEASE. For <

This may be an important step in better understanding delusions.
Ritunnano R, Littlemore J, Nelson B, Humpston CS, Broome MR (2026): Delusion as embodied emotion: a qualitatively driven, multimethod study of first-episode psychosis in the UK. The Lancet Psychiatry. DOI: 10.1016/S2215-0366(25)00341-4