Unverified NPM Account Takeover Vulnerability for Sale on Dark Web Forum(socket.dev)35 points by feross 2 years ago | 3 comments
Social engineering campaign targeting tech employees spreads through NPM malware(socket.dev)106 points by feross 3 years ago | 71 comments
Libxml2 Maintainer Ends Embargoed Vulnerability Reports, Citing Unsustainable(socket.dev)4 points by feross 1 year ago | 0 comments
Active NPM supply chain attack: Tinycolor and 40 Packages Compromised(socket.dev)29 points by feross 1 year ago | 4 comments
MCP is great, you're just using it wrong(techstackups.com)8 points by ritzaco 7 months ago | 5 comments
Everything You Never Wanted to Know About CMake (Redux)(izzys.casa)52 points by ingve 3 years ago | 21 comments