DDerTyp

7 ms·

1.
Fake GitHub Repositories Spreading Malware via PowerShell(jdstaerk.substack.com)
1 points by DDerTyp 4d ago|1 comments
2.
Node.js Security Fix Silently Broke node-fetch, which broke other tools(jdstaerk.substack.com)
4 points by DDerTyp 3mo ago|1 comments
3.
Node-Fetch on latest Node Update broken(github.com)
4 points by DDerTyp 3mo ago|0 comments
4.
Ask HN: What would you like to be working on?
8 points by DDerTyp 4mo ago|11 comments
5.
by DDerTyp 7mo ago
Can you elaborate more about this? Why is it irrelevant in Western Europe?
6.
Nobel Peace Prize 2025: Venezuelan Politician Maria Corina Machado(bbc.com)
18 points by DDerTyp 11mo ago|11 comments
7.
by DDerTyp 11mo ago
Obvious comment to various Amazon price trackers like https://keepa.com/
8.
30–60–90-day guide to leading your new dev team like a pro(kamenistak.com)
1 points by DDerTyp 1y ago|0 comments
9.
GitHub: Our plan for a more secure NPM supply chain(github.blog)
2 points by DDerTyp 1y ago|0 comments
10.
The September NPM Attack Was a Warning. Are We Listening?(jdstaerk.substack.com)
2 points by DDerTyp 1y ago|0 comments
11.
by DDerTyp 1y ago
TIL: I need to fix my CI pipeline. Gonna create a jira ticket I guess… Thank you!
12.
by DDerTyp 1y ago
You’re right and the excerpt you quoted was poorly worded and confusing. A lockfile is designed to do exactly what you said. The package.json locked the file to ^1.3.2. If a newer version exists online that still satisfies the range in pack
13.
by DDerTyp 1y ago
Noticed that after ten mins, contacted author immediatly and he seems to be working on it / restoring his account / removing malware on published packages. Kinda "proud" on it haha :D
14.
by DDerTyp 1y ago
One of the most insidious parts of this malware's payload, which isn't getting enough attention, is how it chooses the replacement wallet address. It doesn't just pick one at random from its list. It actually calculates the L
15.
by DDerTyp 1y ago
It looks like a lot of packages of the author have been compromised (in total over 1 billion downloads). I've updated the title an added information to the blog post.
16.
by DDerTyp 1y ago
Update: It seems like all packages of the author got hacked.
17.
by DDerTyp 1y ago
The discrepancy comes from how npm packages are published. What you see on GitHub is whatever the maintainer pushed to the repo, but what actually gets published to the npm registry doesn’t have to match the GitHub source. A maintainer (or
18.
Npm packages with over 1b weekly downloads, incl. Chalk, have been compromised.(jdstaerk.substack.com)
23 points by DDerTyp 1y ago|1 comments
19.
Keyboard Is Holding Your AI Back(jdstaerk.substack.com)
2 points by DDerTyp 1y ago|0 comments
20.
Perlin Noise(en.wikipedia.org)
4 points by DDerTyp 3y ago|0 comments
21.
Glicko Rating System(en.wikipedia.org)
2 points by DDerTyp 3y ago|0 comments
22.
by DDerTyp 3y ago
Hey, I just found your LinkedIn Profile and noticed that we studied at the same university - even the same degree! I've send you a request on LinkedIn, so maybe we could connect and have a chat? Have a great day!
23.
Resources to learn Docker/containerization of an monolithic web-application
3 points by DDerTyp 4y ago|2 comments
24.
Ask HN: Books to read when you transform from SWE into SWE Management?
314 points by DDerTyp 5y ago|93 comments
25.
Russia: Why SWIFT closure did not make sense(thesearemythoughts.substack.com)
6 points by DDerTyp 5y ago|1 comments
26.
Namecheap just snaked another domain off me(reddit.com)
51 points by DDerTyp 6y ago|33 comments
27.
Being an Effective Tech Lead(mikeborozdin.com)
4 points by DDerTyp 6y ago|0 comments
28.
by DDerTyp 6y ago
Thanks for sharing this with us. This advice (change from being a shooting star to helping others to improve) seems to be in contrast to the article. Or am I missing something?
29.
Ted Talk: Learning Chineasy by ShaoLan Hsueh(youtu.be)
1 points by DDerTyp 6y ago|0 comments
30.
The Entertainment Loop: Problem for Netflix, Disney+ & Co(jdstaerk.de)
3 points by DDerTyp 6y ago|0 comments

More ›