Stories by feross

Tick Tock, Your Credentials Are Gone: Maven Package with Monthly Theft Schedule

Lazarus Group deceives developers with 6 new malicious NPM packages

Tick Tock, Your Credentials Are Gone: The Maven Package with a Monthly Theft

Save the date: Progress Conference 2025

OpenAI Nonprofit Buyout: Much More Than You Wanted to Know

Socket and Seal Security Collaborate to Fix Critical NPM Overrides Bug

OpenAI API Updates, Steelmanning the API Business, the Problem with Both

The Ozempocalypse Is Nigh

Hedge Funds Need to Know the Weather

What Happened to NAEP Scores?

The Pair Program Podcast: Feross Aboukhadijeh on Preserving Trust in Open Source

Arbs Want to Appraise Endeavor

New to the Web Platform in February

Opengrep Launches Playground in Alpha: A Faster, More Stable Environment For

Ruby-align is Baseline Newly available

Why Should Intelligence Be Related to Neuron Count?

Free Software Foundation Goes to Bat for AGPL in Amicus Brief Criticizing

An Interview with Michael Nathanson About the Streaming Endgame

The Art of Tech Interviewing

Malicious Go Package Exploits Go Module Proxy Caching for Persistence

18 19 20 21 22 23 24 25 26 27