Stories by feross

Feross on Risky Business Weekly Podcast: NPM's Ongoing Supply Chain Attacks

Kerberoasting

iPhones 17 and the Sugar Water Trap

Tier 1 Reachability: Precision CVE Triage for Enterprise Teams

DuckDB NPM Account Compromised in Continuing Supply Chain Attack

Malicious NPM Packages Impersonate Flashbots SDKs, Targeting Ethereum Wallet

Rv Is a New Rust-Powered Ruby Version Manager Inspired by Python's Uv

Review: Participation in Phase I Clinical Pharmaceutical Research

Stop Burning Money on Performance Firefighting

An Interview with Cloudflare Founder and CEO Matthew Prince About Internet

Links for September 2025

Release Notes for Safari Technology Preview 227

Nx Investigation Reveals GitHub Actions Workflow Exploit Led to NPM Token Theft

Sports Team Owners Like to Win

Watt 3

Next-Generation Flamegraph Visualization for Node.js

Made by Google 2025, AI Trade-Offs, Google and the Long-Term

Massimo

Wallet-Draining NPM Package Impersonates Nodemailer to Hijack Crypto

2
3
4
5
6
7
8
9
10
11