Stories by feross

NPM package poses as legit Ethereum smart contract, injects Quasar RAT

Weaponizing OAST: How Malicious Packages Exploit NPM, PyPI, and RubyGems For

Composable Caching with Next.js

Malicious NPM Campaign Targets Ethereum Developers with Fake Hardhat Packages

H5N1: Much More Than You Wanted to Know

Looking Back on the 2024 Blog-Building Intensive Fellowship

Quasar Rat Disguised as an NPM Package for Detecting Vulnerabilities in Ethereum

New to the Web Platform in December

Claude Fights Back

Supply Chain Attack on NPM Packages Injects Cryptojacking Malware

Release Notes for Safari Technology Preview 210

How to Lose a Fortune with Just One Bad Click

Sonar to Acquire Tidelift, Scaling Open Source Maintainer Support

Links for December 2024

The Business of Ransomware: Insights from Reddit AMA with Ransomware

PyPI on Ultralytics Supply Chain Attack: Poor CI/CD Practices to Blame, No

People Want SpaceX Shares

Data Theft Repackaged: A Case Study in Malicious Wrapper Packages on NPM

7
8
9
10
11
12
13
14
15
16