Hackread.comWatch out: Fake npm packages are impersonating a popular PostCSS tool to drop a #Windows RAT and steal passwords stored in Chrome.
Listen or Read: https://hackread.com/fake-npm-packages-postcss-tool-steal-chrome-password/
The Threat CodexFrom PostCSS Masquerading to Windows RAT
#PostCSS #npm
https://research.jfrog.com/post/from-postcss-typosquat-to-windows-rat/
#PostCSS #npm
https://research.jfrog.com/post/from-postcss-typosquat-to-windows-rat/
From PostCSS Masquerading to Windows RAT - JFrog Security Research
JFrog Security Research analyzed a suspicious npm package named postcss-minify-selector-parser. The package impersonates the popular PostCSS selector-parser ecosystem and hides a multi-stage payload that downloads a Windows Python/Nuitka RAT.
Analyst207Malicious npm Packages Deliver Windows RAT via PostCSS Tooling
Beware of malicious npm packages masquerading as popular tools like PostCSS - researchers have uncovered three fake packages that have racked up over 1,000 downloads and deliver a sneaky Windows remote access trojan. These lookalike packages, published just over a month ago, have been cleverly designed to fly under the radar.
#MaliciousNpmPackages #WindowsRat #Postcss #SupplyChain #EmergingThreats
botPostCSS 제작자가 공개하는 인기 오픈 소스 프로젝트를 만드는 전략과 비결
오픈 소스 프로젝트의 성공은 단순히 기술적인 우수성이나 좋은 아이디어에 국한되지 않으며, 제작자의 인지도와 전략적인 홍보, 그리고 사용자가 체감할 수 있는 실질적인 혜택과 운이 조화를 이루어야 가능합니다.
Rails 앱 성능 최적화를 위한 PurgeCSS 적용 가이드
PurgeCSS는 HTML, JS, Ruby 파일을 분석하여 실제 사용 중인 CSS 선택자만 남기고 나머지를 제거해 스타일시트 파일 크기를 획기적으로 줄인다.
Bryce WrayPost >> Hugo’s new CSS powers • A recent update can make it easier than ever to style your site, depending on how you want to do that styling.
https://www.brycewray.com/posts/2026/04/hugos-new-css-powers/
#CSS #webdev #Hugo #preprocessing #postprocessing #PostCSS #LightningCSS #Sass #scss #esbuild #cssBuild
Oscar Cubo MedinaPor fin me he quitado de encima un potencial problema que me traía de cabeza. El tema de una aplicación crítica ahora se visualiza decentemente y es operativo en el #Webview que usa Microsoft en sus aplicaciones.
La solución es algo enrevesada: incluye un pipeline complejo con #gulp y #webpack usando #SASS, #PostCSS, transpilación de módulos JavaScript, un par de #polyfills, un #ponyfill, una pizca de magia arcana y varios artificios quirúrgicos. Dista de ser perfecta pero por lo menos es funcional.
The whale𝗕𝘆, 𝗯𝘆 𝗖𝗦𝗦𝗡𝗲𝘅𝘁, 𝗵𝗲𝗹𝗹𝗼 𝗽𝗼𝘀𝘁𝗰𝘀𝘀-𝗽𝗿𝗲𝘀𝗲𝘁-𝗲𝗻𝘃:
https://thewhale.cc/posts/by-by-cssnext-hello-postcss-preset-env
As CSSNext is now deprecated you can use instead the Postcss plugin "PostCSS Preset Env" to lets you use modern CSS in your style sheet.
𝗕𝘆, 𝗯𝘆 𝗖𝗦𝗦𝗡𝗲𝘅𝘁, 𝗵𝗲𝗹𝗹𝗼 𝗽𝗼𝘀𝘁𝗰𝘀𝘀-𝗽𝗿𝗲𝘀𝗲𝘁-𝗲𝗻𝘃:
https://thewhale.cc/posts/by-by-cssnext-hello-postcss-preset-env
As CSSNext is now deprecated you can use instead the Postcss plugin "PostCSS Preset Env" to lets you use modern CSS in your style sheet.
HabrФиксим залипающий hover на мобильных устройствах
Что мы проверили: Залипающий hover на мобильных устройствах – частый баг. Раньше мы решали это просто плагином PostCSS Hover Media Feature, он оборачивает все псевдоклассы :hover в медиазапрос @media (hover: hover) {}. Так мы проверяли поддержку hover и отключали его на мобилках. Но во время тестирования одного проекта оказалось, что на некоторых устройствах hover продолжает залипать.
