Malicious NPM Package with 56K Downloads Steals WhatsApp Messages
https://cybersecuritynews.com/malicious-npm-package-with-56k-downloads/
#Infosec #Security #Cybersecurity #CeptBiro #NPMPackage #Steals #WhatsAppMessages
Malicious NPM Package with 56K Downloads Steals WhatsApp Messages
https://cybersecuritynews.com/malicious-npm-package-with-56k-downloads/
#Infosec #Security #Cybersecurity #CeptBiro #NPMPackage #Steals #WhatsAppMessages
🔥 The NPM supply chain attack just got bigger!
DuckDB database packages have been compromised with crypto-stealing malware. A simple phishing email led to packages used by thousands of developers being infected.
The malware is designed to steal cryptocurrency by hijacking wallet transactions - pretty sophisticated stuff!
Read Details - https://www.cyberkendra.com/2025/09/duckdb-packages-compromised-in-latest.html
The NPM supply chain attack targeting major JavaScript packages has claimed another victim, with popular database library DuckDB confirming that four of its Node.js packages were compromised with cryptocurrency-stealing malware just hours after the …
NPM package ‘is’ with 2.8M weekly downloads infected devs with malware
https://www.bleepingcomputer.com/news/security/npm-package-is-with-28m-weekly-downloads-infected-devs-with-malware/
#Infosec #Security #Cybersecurity #CeptBiro #NPMpackage #Devs #Malware
Referenced link: https://hackernoon.com/how-to-publish-your-package-on-npm-registry
Discuss on https://discu.eu/q/https://hackernoon.com/how-to-publish-your-package-on-npm-registry
Originally posted by HackerNoon | Learn Any Technology / @[email protected]: https://twitter.com/hackernoon/status/1571303019840512002#m
"How to Publish Your Package on NPM Registry" cc: @theritikchoure https://hackernoon.com/how-to-publish-your-package-on-npm-registry #npmpackage #javascript
Sometimes, you have to interface with an API that doesn't respond fast enough. Moreover, you might perform the same request multiple times.
The solution?
Return the same promise for the same exact requests until they resolve. This is more useful when you interface with stateless APIs, where you just consume data.
https://github.com/chrispanag/memoized-node-fetch
#node #nodejs #npm #npmpackage #package #javascript #typescript #opensource
Weekends to #developers is time for hobby projects.
Worked half of my Sunday and fixed the issues.
v0.0.5 is published finally.
Changelogs:
- Fixed a major issue with exceptions.
- Better error handling with appropriate messages.
- New parameter factor introduced which helps in modifying the cropped area of face.
- More unit test cases added.
- Code Coverage enhanced to 99%.
#npm #npmPackage #nodejs #javascript #devops #cicd #automation #foss #opensource #opensourceContributions
Just released v0.0.4!
Changelogs:
- Function API has been modified to reduce complexity.
- Fixes in loading pre-trained classifier files.
- Added .npmignore file.
- Reduced package size to less than a MB.
- Added unit test cases for the new developments.
- Moved to Codecov from Sonarqube.
- Achieved 95% code coverage.
- README updates with images added.
#npm #npmPackage #nodejs #javascript #devops #cicd #automation #foss #opensource #opensourceContributions
Released v0.0.3!
Changelogs:
- Added support for multi-face detection.
- Redirecting to opencv4js npm package to obtain the updated opencv.js file easily.
- Integrated Sonarqube for code scanning and detect bugs/issues/smells in code.
- Integrated Jest for unit testing.
- Code coverage- 94.4%.
- README updates to provide more clarity.
v1.0.0 will be arriving by next week.
#npm #npmPackage #nodejs #javascript #devops #cicd #automation #foss #opensource #opensourceContributions
v0.0.2 is out now!
Changelogs:
- Minor code tweaks.
- Github Actions workflow added to automate publishing to npm registry.
- Documentation updated with relevant details on how to use the package.
#npm #npmPackage #javascript #GithubActions #devops #cicd #automation #foss #opensource #opensourceContributions