Loading feed…
Aikido Security1 Hot0 comments5 min read
MemTensor npm and PyPI hit by "supplychain.local" malware
AI summary
Gần đây các gói MemTensor phiên bản 0.1.21 và 0.1.23 trên npm cùng MemoryOS 2.0.34 trên PyPI bị phát hiện chứa mã độc "supplychain.local". Mã độc này được chèn vào quá trình build package, cho phép kẻ tấn công chiếm quyền điều khiển hệ thống nạn nhân. Hậu quả là hàng nghìn dự án sử dụng các thư viện này có nguy cơ bị nhiễm malware. Nhà phát triển cần kiểm tra lại các dependencies trong dự án và cập nhật lên phiên bản an toàn để tránh rủi ro bảo mật.
AI summaries can be wrong. Read the original before relying on anything important.
Why read it: Lập trình viên nên đọc bài này để nhận thức về mối đe dọa an ninh chuỗi cung ứng trong các package npm và PyPI nhằm bảo vệ dự án của mình.
What do you remember?
Answer 3 short questions to earn reward points for this article. Only do it if you want the points.
up to +17 points
3 questions · under a minute · optional
Source: https://www.aikido.dev/blog/supplychain-local-memtensor-npm-pypi. 8 Sync News only summarizes and links out; content copyright belongs to the authors and original sources.
8 Sync ecosystem
One account, the whole ecosystem
Read the news here, practice coding, follow structured courses and train for IELTS on our sibling products — all connected through one 8 Sync account.
8syncdev.com
8syncdev.comThe ecosystem home: product overviews, blog and full pricing.
ExploreCourses
course.8syncdev.comLearn along a clear roadmap: videos, auto-graded quizzes, certificates and mentors who ship for a living.
View the roadmapCoding practice
coding.8syncdev.com1,000 DSA problems in Vietnamese, auto-graded across 7 languages — many FREE, right in your browser.
Practice for freeIELTS
ielts.8syncdev.comAI grading for all four IELTS skills with detailed rubric feedback.
Try it freeZUS — AI IDE
zus.8syncdev.comA 22 MB AI IDE for Vietnamese devs.
Download freemind0
mind0.8syncdev.comOrganizational memory for AI agents.
ExploreAcoLeads
home-acoleads.8syncdev.comAI that staffs your Fanpage and qualifies leads for you.
Try itRecommended for you
JetBrains1 Hot20 min
The State of Go in 2026: What Changed In the Golang Ecosystem Since Last Year
What changed in the Go ecosystem since last year? We looked at the Developer Ecosystem 2026 survey to bring you the answers.
Hacker News2 Hot13 min
Show HN: STE80 Humanizer – de-AI text by writing 80% of the way to ASD-STE100
STE80 Humanizer: agent skill that removes AI tells and rewrites text 80% of the way to ASD-STE100 (Simplified Technical English), the method Andrej Karpathy shared. - Dodaios/ste80-humanizer
freeCodeCamp258 Hot2 min
Learn Real-World Penetration Testing: Hands-On Ethical Hacking Crash Course
Understanding how malicious actors infiltrate networks is the first step to building resilient infrastructure. To help developers and aspiring security analysts learn the fundamentals of offensive sec
Hacker News54 Hot4 min
Pwn.college
pwn.college is a free, hands-on education platform for learning core cybersecurity and hacking skills, maintained by a team at Arizona State University. Learners progress through belt ranks, starting with a 'white belt' and earning belts through practice. Hackers continue beyond the platform to 'brown belt' and eventually 'black belt' status, which must happen outside the dojo. The site powers much of ASU's cybersecurity curriculum and asks users not to post writeups or walkthrough videos of challenge solutions. It points learners toward CTFtime.org for Capture The Flag events and a GitHub list of wargames for further practice. The underlying infrastructure is open source and accepts pull requests, though some modules remain closed-source.
Simon Willison1 Hot10 min
Locating the source of a mysterious beep with Claude
Simon Willison used Claude Code to build Beep Locator, a system that triangulates the source of an intermittent beeping sound using multiple devices as listeners. The Python web server coordinates phones, iPads and laptops over WebSockets, using Fast Fourier Transform beep detection and a chirp to align recorded clips, and Willison names the 2007 BeepBeep acoustic ranging paper as the research Claude found. The tool located the beep to within about 40cm, which turned out to be an ancient carbon monoxide detector that wanted its batteries replaced. He started with Claude Code Cloud running Opus 5.5 on his iPhone, then continued on his laptop after Fable 5.2 was released, iterating live by pushing new JavaScript to listening devices so they did not need to be manually restarted.
Noted2 Hot6 min
AudioSilo: A Self-Hosted Audiobook Server
AudioSilo lets you host your own audiobook library with mobile apps, offline listening, progress syncing, and Docker support.
Machine Learning Pills1 Hot9 min
Issue #147 - Reinforcement Learning Explained with a Practical Python Example
How agents learn from rewards, why exploration matters, and how to build your first Q-learning agent.
Hacker News69 Hot1 min
OccupySaaS
OccupySaaS is a protest movement in code: laid-off developers building clean-room, open-source, drop-in replacements for the SaaS giants. First up: ZeroAuthy (Auth0) and SalesCompel (Salesforce).
Comments
Loading comments…