Malicious NPM Versions (chalk, debug, strip-ANSI) Found in September 2025 Attack

Comments (1)

cosmodev · 12h ago

On September 8–9, 2025, a major NPM supply chain attack compromised packages like chalk, debug, and strip-ansi. We built an open source tool (guard-deps) to scan repos and remediate malicious versions. This post summarizes the attack details and provides a full list of compromised versions.

Show HN: LLMs around crypto and stock markets (aulico.com)

Quantum Algorithm Zoo (quantumalgorithmzoo.org)

Checkpoint-engine: A middleware to update model weights in LLM inference engines (github.com)

Post by Lim Chong Sun (Microsoft), SSD: Windows Update Broke File Transfer? (learn.microsoft.com)

Richard Feynman and the Connection Machine (longnow.org)

Math Resource: The Centre for Education in Mathematics and Computing (CEMC) (kidswholovemath.substack.com)

Old timers, what did you read to study Unix or languages by the book?

Show HN: Npx tunnel-chat latest → instant secure chat between two terminals (ditch.chat)

US shows slowest progress in chronic disease deaths among high income nations (cnn.com)

Breaking the Sound Barrier of 1M TPS Blockchain (blog.ormilabs.com)

Charlie Kirk, who forged a conservative youth movement, dead aged 31 (bbc.com)

DOOMscrolling: The Game (ironicsans.ghost.io)

Poland invokes NATO's Article 4 after Russian drone incursion [video][4 mins] (youtube.com)

Pg_DuckDB Version 1.0 (motherduck.com)

You and Your Local Gradient (whybyfire.net)

XNEdit – fast and classic X11 text editor (unixwork.de)

Browser.js (github.com)

ARM is great, ARM is terrible (and so is RISC-V) – The Changelog (changelog.complete.org)

Possibilities for Low-Fidelity Mind Uploading (zaira.blog)

Tesla Solar Roof Costs $6-8 per Watt vs. $3 Traditional (fistsolar.com)

Many Hard LeetCode Problems Are Easy Constraint Problems (buttondown.com)

The Rise of Political Violence and Targeting of Lawmakers in the U.S. (time.com)

How Much Math Is Knowable? (Scott Aaronson Santa Fe Institute Talk) [video] (youtube.com)

Membrane Biology (en.wikipedia.org)

Tesla Doors Can Trap People Desperate to Escape (bloomberg.com)

Hetzner Storage Boxes (hetzner.com)

Database Entity Recognition with Data Augmentation and Deep Learning (arxiv.org)

RSS co-creator launches new protocol for AI data licensing (techcrunch.com)

Racintosh Plus – custom rack mounted classic Mac (identity4.com)

Intel's E2200 "Mount Morgan" IPU at Hot Chips 2025 (chipsandcheese.com)

Ted Cruz Proposes Sandbox Act to Waive Federal Regulations for AI Developers (commerce.senate.gov)

Show HN: AI Rules Manager – Package manager for AI coding assistant rules (github.com)

Knots and π-Calculus (2010) (arxiv.org)

Alignment Bears (alignmentbears.com)

Cat Age Calculator (dogcatagedcalculator.com)

Real-Time Detection of Hallucinated Entities in Long-Form Generation (hallucination-probes.com)

Shape Checking for Annotated Tensor Names (github.com)

The 4p Developer: The Missing Layer in Platform Thinking (davidpoll.com)

You're a Slow Thinker. Now What? (chillphysicsenjoyer.substack.com)

Phospholipid head govern area per lipid and emergent elasticity of bilayer(2018) (cell.com)

AI School Is in Session (nytimes.com)

Rpsduel.com – Live Rock Paper Scissors with Instant ELO Matchmaking (rpsduel.com)

DNA cassette tape can store every song ever recorded (newscientist.com)

Steve Hayden, Writer Behind Apple's Pivotal '1984' Commercial, Dies at 78 (nytimes.com)

KDE launches its own distribution (lwn.net)

Defining Deviancy Up (scottsumner.substack.com)

Christie's Deletes Digital Art Department (news.artnet.com)

We Built a Vehicle History Report from Scratch (cardog.app)

US warns hidden radios may be embedded in solar-powered highway infrastructure (reuters.com)

AI Is Coming for YouTube Creators (theatlantic.com)

Malicious NPM Versions (chalk, debug, strip-ANSI) Found in September 2025 Attack

Comments (1)