News for hackers. Stuff that matters.

nycalexander

Re:Big attack on NPM – Shai-Hulud 2.0 on Wednesday November 26, 2025 @09:08AM (#46057541)
Made a package (that I needed personally), to easily reinstall all dependencies (using the same versions) in a project and check them using Aikido's safe chain for malware (supported npm, pnpm, bun, and yarn). It also easily switches a project's package manager to another. https://www.npmjs.com/package/eazypm
Re:Shai-Hulud Returns: Over 300 NPM Packages Infected on Wednesday November 26, 2025 @09:07AM (#46057529)
Made a package (that I needed personally), to easily reinstall all dependencies (using the same versions) in a project and check them using Aikido's safe chain for malware (supported npm, pnpm, bun, and yarn). It also easily switches a project's package manager to another. https://www.npmjs.com/package/eazypm
Made a package (that I needed personally), to easily reinstall all dependencies (using the same versions) in a project and check them using Aikido's safe chain for malware (supported npm, pnpm, bun, and yarn). It also easily switches a project's package manager to another.
Re:Malware in PostHog NPM packages on Wednesday November 26, 2025 @08:25AM (#46057174)
Made a package (that I needed personally), to easily reinstall all dependencies in a project using Aikido's safe guard for npm, pnpm, bun, and yarn. https://www.npmjs.com/package/eazypm