ESLint-config-prettier briefly had few versions with malware published

Comments (1)

butz · 5h ago

While issue is already fixed, it would be interesting to know what precautions should users of npm packages take to prevent running malware on their PC during npm package installation?

LLM Inevitabilism (tomrenner.com)

Adding a feature because ChatGPT incorrectly thinks it exists (holovaty.com)

OpenAI’s Windsurf deal is off, and Windsurf’s CEO is going to Google (theverge.com)

MacPaint Art from the Mid-80s Still Looks Great Today (blog.decryption.net.au)

Kiro: A new agentic IDE (kiro.dev)

Bypassing Google's big anti-adblock update (0x44.xyz)

Bootstrapping a side project into a profitable seven-figure business (projectionlab.com)

Nvidia won, we all lost (blog.sebin-nyshkim.net)

Linux Reaches 5% Desktop Market Share in USA (ostechnix.com)

Show HN: Ten years of running every day, visualized (nodaysoff.run)

My open source project was relicensed by a YC company [license updated] (twitter.com)

Local-first software (2019) (inkandswitch.com)

Introducing tmux-rs (richardscollin.github.io)

Supabase MCP can leak your entire SQL database (generalanalysis.com)

Let me pay for Firefox (discourse.mozilla.org)

Bitchat – A decentralized messaging app that works over Bluetooth mesh networks (github.com)

Being too ambitious is a clever form of self-sabotage (maalvika.substack.com)

Measuring the impact of AI on experienced open-source developer productivity (metr.org)

Reflections on OpenAI (calv.info)

Grok: Searching X for "From:Elonmusk (Israel or Palestine or Hamas or Gaza)" (simonwillison.net)

Are we the baddies? (geohot.github.io)

ETH Zurich and EPFL to release a LLM developed on public infrastructure (ethz.ch)

Supreme Court's ruling practically wipes out free speech for sex writing online (ellsberg.substack.com)

At Least 13 People Died by Suicide Amid U.K. Post Office Scandal, Report Says (nytimes.com)

ChatGPT agent: bridging research and action (openai.com)

Ukrainian hackers destroyed the IT infrastructure of Russian drone manufacturer (prm.ua)

The Rise of Whatever (eev.ee)

Mistral Releases Deep Research, Voice, Projects in Le Chat (mistral.ai)

US Court nullifies FTC requirement for click-to-cancel (arstechnica.com)

Websites hosting major US climate reports taken down (apnews.com)

Show HN: Shoggoth Mini – A soft tentacle robot powered by GPT-4o and RL (matthieulc.com)

Tree Borrows (plf.inf.ethz.ch)

How does a screen work? (makingsoftware.com)

Mercury: Ultra-fast language models based on diffusion (arxiv.org)

Happy 20th Birthday, Django (djangoproject.com)

Oakland cops gave ICE license plate data; SFPD also illegally shared with feds (sfstandard.com)

Postgres LISTEN/NOTIFY does not scale (recall.ai)

Hidden interface controls that affect usability (interactions.acm.org)

Cloudflare 1.1.1.1 Incident on July 14, 2025 (blog.cloudflare.com)

Linda Yaccarino is leaving X (nytimes.com)

Nobody has a personality anymore: we are products with labels (freyaindia.co.uk)

Apple's MLX adding CUDA support (github.com)

I extracted the safety filters from Apple Intelligence models (github.com)

Data brokers are selling flight information to CBP and ICE (eff.org)

SVGs that feel like GIFs (koaning.io)

I used o3 to profile myself from my saved Pocket links (noperator.dev)

Open letter accuses BBC board member of having a conflict of interest on Gaza (theguardian.com)

Jane Street barred from Indian markets as regulator freezes $566M (cnbc.com)

Show HN: I wrote a "web OS" based on the Apple Lisa's UI, with 1-bit graphics (alpha.lisagui.com)

Apple's Browser Engine Ban Persists, Even Under the DMA (open-web-advocacy.org)

ESLint-config-prettier briefly had few versions with malware published

Comments (1)