Tootfinder

If you're using #TypeScript or #JavaScript or #NPM, where do people hang out and talk about projects/issues these days (other than on Reddit, Discord), i.e. where are the communities/exchanges, since …

RE: #Supplychain attack on #NPM, particularly the #Cacheable and #Keyv ecosystems. Combine the list of affected packages published by @… with those by Wiz and Ox Security for a full picture:
https://www.wiz.io/blog/keyv-and-cacheable-npm-supply-chain-attack
https://www.ox.security/blog/a-new-infostealer-worm-hits-npm-affecting-keyv-and-cacheable/