Experimental News Clipping Site

Tag: package management

  • Slashdot: Self-Replicating Worm Affected Several Hundred NPM Packages, Including CrowdStrike’s

    —

    by

    Kurt Seifried
    in

    Source URL: https://it.slashdot.org/story/25/09/20/0542237/self-replicating-worm-affected-several-hundred-npm-packages-including-crowdstrikes Source: Slashdot Title: Self-Replicating Worm Affected Several Hundred NPM Packages, Including CrowdStrike’s Feedly Summary: AI Summary and Description: Yes Summary: The Shai-Hulud malware campaign has affected numerous npm packages, including those maintained by CrowdStrike, via the injection of malicious scripts designed to steal developer credentials and exfiltrate sensitive information. The campaign highlights…

  • Krebs on Security: Self-Replicating Worm Hits 180+ Software Packages

    —

    by

    Kurt Seifried
    in

    Source URL: https://krebsonsecurity.com/2025/09/self-replicating-worm-hits-180-software-packages/ Source: Krebs on Security Title: Self-Replicating Worm Hits 180+ Software Packages Feedly Summary: At least 187 code packages made available through the JavaScript repository NPM have been infected with a self-replicating worm that steals credentials from developers and publishes those secrets on GitHub, experts warn. The malware, which briefly infected multiple code packages…

  • Slashdot: How Python is Fighting Open Source’s ‘Phantom’ Dependencies Problem

    —

    by

    Kurt Seifried
    in

    Source URL: https://developers.slashdot.org/story/25/08/11/025214/how-python-is-fighting-open-sources-phantom-dependencies-problem?utm_source=rss1.0mainlinkanon&utm_medium=feed Source: Slashdot Title: How Python is Fighting Open Source’s ‘Phantom’ Dependencies Problem Feedly Summary: AI Summary and Description: Yes Summary: The Python Software Foundation is addressing the “phantom dependencies” issue in software packages by introducing the Software Bill-of-Materials (SBOM) through Python Enhancement Proposal 770. This initiative enhances metadata accessibility, making it easier…

  • The Register: Not pretty, not Windows-only: npm phishing attack laces popular packages with malware

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.theregister.com/2025/07/24/not_pretty_not_windowsonly_npm/ Source: The Register Title: Not pretty, not Windows-only: npm phishing attack laces popular packages with malware Feedly Summary: The “is" package was infected with cross-platform malware after a scam targeting maintainers The popular npm package "is" was infected with cross-platform malware, around the same time that linting utility packages used with the…

  • Simon Willison’s Weblog: Introducing OSS Rebuild: Open Source, Rebuilt to Last

    —

    by

    Kurt Seifried
    in

    Source URL: https://simonwillison.net/2025/Jul/23/oss-rebuild/ Source: Simon Willison’s Weblog Title: Introducing OSS Rebuild: Open Source, Rebuilt to Last Feedly Summary: Introducing OSS Rebuild: Open Source, Rebuilt to Last Major news on the Reproducible Builds front: the Google Security team have announced OSS Rebuild, their project to provide build attestations for open source packages released through the NPM,…

  • Cloud Blog: Announcing a new monitoring library to optimize TPU performance

    —

    by

    Kurt Seifried
    in

    Source URL: https://cloud.google.com/blog/products/compute/new-monitoring-library-to-optimize-google-cloud-tpu-resources/ Source: Cloud Blog Title: Announcing a new monitoring library to optimize TPU performance Feedly Summary: For more than a decade, TPUs have powered Google’s most demanding AI training and serving workloads. And there is strong demand from customers for Cloud TPUs as well. When running advanced AI workloads, you need to be…

  • AWS News Blog: Simplify serverless development with console to IDE and remote debugging for AWS Lambda

    —

    by

    Kurt Seifried
    in

    Source URL: https://aws.amazon.com/blogs/aws/simplify-serverless-development-with-console-to-ide-and-remote-debugging-for-aws-lambda/ Source: AWS News Blog Title: Simplify serverless development with console to IDE and remote debugging for AWS Lambda Feedly Summary: Developers can now build serverless applications faster through seamless console-to-IDE transition and debugging of functions running in the cloud from local IDE. AI Summary and Description: Yes Summary: The text outlines new…

  • Slashdot: Over 3,200 Cursor Users Infected by Malicious Credential-Stealing npm Packages

    —

    by

    Kurt Seifried
    in

    Source URL: https://developers.slashdot.org/story/25/05/11/2222257/over-3200-cursor-users-infected-by-malicious-credential-stealing-npm-packages?utm_source=rss1.0mainlinkanon&utm_medium=feed Source: Slashdot Title: Over 3,200 Cursor Users Infected by Malicious Credential-Stealing npm Packages Feedly Summary: AI Summary and Description: Yes Summary: The text highlights a recent cybersecurity threat involving malicious npm (Node Package Manager) packages that target the AI-powered code-editing tool Cursor on macOS. The packages are designed to steal user credentials…