Stories by feross

Sitters and Standers

Typosquatting Cryptographic Libraries: Malicious NPM Packages Threaten Crypto

Stanford Study Finds 9.5% of Engineers Do Almost Nothing

Progress Conference Reflections – and 2025 Plans (We're Hiring)

Malicious NPM Packages Inject SSH Backdoors via Typosquatted Libraries

Against the Generalized Anti-Caution Argument

Input Validation Vulnerabilities Dominate MITRE's 2024 CWE Top List

Release Notes for Safari Technology Preview 208

Make creative borders with background-clip border-area

Risky Business Podcast: Why Open Source Software Needs Better Malware Tracking

How Did You Do on the AI Art Turing Test?

Insider Trading at the Fed

Threat Actor Exposes Playbook for Exploiting NPM to Build Blockchain-Powered

Malicious NPM Package Exploits WhatsApp Authentication with Remote Kill Switch

GitHub Copilot for Azure

Individual Investors Put Up the Cash

An Interview with the Target and Home Depot Hacker

The Early Christian Strategy

GitHub Removes Malicious Pull Requests Targeting Open Source Repositories

16
17
18
19
20
21
22
23
24
25