HN user
On September 8–9, 2025, a major NPM supply chain attack compromised packages like chalk, debug, and strip-ansi. We built an open source tool (guard-deps) to scan repos and remediate malicious versions. This post summarizes the attack details and provides a full list of compromised versions.
As someone whose native language isn't English but uses English across devices and daily life, this add-on is incredibly useful. I still prefer seeing video titles in my own language.
I was using this with Certbot for 17 different domains it's a bit sad to see it go. I’m not even sure if I ever relied on the notifications, but just knowing it existed gave some peace of mind.
When I first read the headline, I got excited thinking someone had discovered a better method for finding prime numbers. It could’ve been a game changer for what I’m currently working on with elliptic curves and polynomial commitments. Turns out that’s not the case with this article but I’m still waiting for some genius out there to make it happen.
I’ve been working with zk proofs and elliptic curves for a while, and seeing them visualized like this is such a treat. Really enjoyed it! Visualized mathematical functions like these are true nerd art and I absolutely love it.
Handling bot traffic isn’t that tough. Sure, AI’s ramped up web crawling, but I don’t think it’s the real villain here just need better site prep!
I just clicked to take a quick look, and suddenly found myself playing it's a simple but surprisingly enjoyable game
When I was just starting to learn programming years ago, I wanted to build apps for mobile devices. But my computer couldn’t handle Android Studio, so I started exploring alternatives and that’s when I discovered Firefox OS. The idea of building apps with JavaScript was really exciting. All I wanted back then was to make a simple WebView app. It’s fascinating to learn the story behind Firefox OS all these years later