Ask HN: Good resources for DIY-ish animatronic kits for Halloween?
4 points by xrd 1d ago 0 comments
Why the Technological Singularity May Be a "Big Nothing"
7 points by starchild3001 1d ago 8 comments
NPM package 'debug' v4.4.2 contains malware
29 q3k 4 9/8/2025, 1:49:48 PM social.hackerspace.pl ↗
Comments (4)
davely · 4h ago
More and more, I am thinking all my local development environments for Node / JavaScript projects need to be setup in a sandboxed VM.
dylmye · 4h ago
The two listed collaborators of the debug package have over 700 packages published collectively, many of them with millions of weekly downloads. What could possibly go wrong when their token is compromised?
q3k · 5h ago
GH issue: https://github.com/debug-js/debug/issues/1005
ChrisArchitect · 4h ago
A blog post: https://www.aikido.dev/blog/npm-debug-and-chalk-packages-com... (https://news.ycombinator.com/item?id=45169657)