@kubikpixel@chaos.social2025-09-08 17:35:16
»npm Packages With 2 Billion Weekly Downloads Hacked in Major Attack:
Aikido Security flagged the largest npm attack ever recorded, with 18 packages like chalk, debug, and ansi-styles hacked to hijack crypto wallets via injected code.«
Good heavens! Another example of how "simple" and popular programming languages are misused to exploit users.
😠
@datascience@genomic.social2025-11-10 11:00:00
A template for data analysis projects structured as R packages (or not) https://github.com/Pakillo/template by @…
@memeorandum@universeodon.com2025-10-10 14:31:02
UPS is 'disposing of' U.S.-bound packages over customs paperwork problems (Kayla Steinberg/NBC News)
https://www.nbcnews.com/business/business-news/ups-delay-customs-tariffs-packages-destroyed-rcna236607
http://www.memeorandum.com/251010/p38#a251010p38
@netzschleuder@social.skewed.de2025-10-10 07:00:05
python_dependency: Python Dependency Network
Python's package dependency networks. Nodes in the network are Python's packages registered to PyPI and edges are dependencies among packages.
This network has 58743 nodes and 108399 edges.
Tags: Technological, Software, Unweighted
https://networks.sk…
@metacurity@infosec.exchange2025-09-09 10:56:27
DOGE is still slashing government contracts, with around $2.2 billion in cyber contracts cut through August 2025.
Check out today's Metacurity for more on which contracts have been cut and other top infosec developments you should know, including
--18 popular JavaScript code packages were compromised by malware,
--WhatsApp former security chief accuses Meta of security and privacy flaws,
--Treasury sanctions Myanmar and Cambodia scam businesses and people,
--IC…
@vosje62@mastodon.nl2025-11-10 11:36:59
@Techmeme@techhub.social2025-09-08 17:10:44
Aikido Security says attackers injected malware into 18 popular npm packages, including the debug package, with over 2.6B total weekly downloads (Sergiu Gatlan/BleepingComputer)
https://www.bleepingcomputer.com/news/secu
@thomasfuchs@hachyderm.io2025-09-08 18:31:11
It’s almost like programming language monocultures with “best practices“ and paradigms requiring hundreds or thousands of dependencies even for simple apps are harmful https://www.bleepingcomputer.com/news/security/hackers-hijack-npm-packages-with-2-billion-weekly-downloads-in-supply-chain-attack/
@netzschleuder@social.skewed.de2025-08-10 05:00:06
python_dependency: Python Dependency Network
Python's package dependency networks. Nodes in the network are Python's packages registered to PyPI and edges are dependencies among packages.
This network has 58743 nodes and 108399 edges.
Tags: Technological, Software, Unweighted
https://networks.sk…
@netzschleuder@social.skewed.de2025-10-08 05:00:06
python_dependency: Python Dependency Network
Python's package dependency networks. Nodes in the network are Python's packages registered to PyPI and edges are dependencies among packages.
This network has 58743 nodes and 108399 edges.
Tags: Technological, Software, Unweighted
https://networks.sk…
