🇺🇦 #NowPlaying on #KEXP's #DriveTime
Chalk:
🎵 Pain
https://isobelanderson.bandcamp.com/track/effortless-pain-relief
https://open.spotify.com/track/14M05BE09j5oytK3Wd9KWL
🎶 show playlist 👇
https://open.spotify.com/playlist/2KW4FxNKVGpVTgIJYolnNY
🎶 KEXP playlist 👇
https://open.spotify.com/playlist/6VNALrOa3gWbk794YuIrwg
from the album CHALK / FLINT
🚨 NPM supply-chain compromise: over 2B weekly downloads impacted
@aikidosecurity reports that popular #packages maintained by #qix (including #chalk, #debug, #ansistyles, #supportscolor, and others) were compromised.
These packages are deeply embedded in the #Node.js #ecosystem, used by frameworks, build tools, and apps worldwide.
Meh…. 🫤 supply-chain security isn’t optional.
#sbom ?
-Audit dependencies regularly
-Pin versions where possible
-Monitor advisories and lockfile integrity
Source: https://www.aikido.dev/blog/npm-debug-and-chalk-packages-compromised
NPM debug and chalk packages compromised
https://www.aikido.dev/blog/npm-debug-and-chalk-packages-compromised
#HackerNews #NPM #Debug #Chalk #Security #Compromise #PackageManagement
🇺🇦 #NowPlaying on #BBC6Music's #AmyLamé
Chalk:
🎵 Pain
https://isobelanderson.bandcamp.com/track/effortless-pain-relief
https://open.spotify.com/track/14M05BE09j5oytK3Wd9KWL
Please 🔁 BOOST to share what you like
- your followers don't see if you ⭐ favourite a post
from the album CHALK / FLINT
They warn you, somewhat cheesily, about yellow snow - but have you ever seen yellow chalk? I did, on the North Norfolk coast.