Install
A constructive and inclusive social network for software developers. With you every step of your journey.
- 30,237articles · 90d
- 8+ min agolatest article
- Jun 15, 2026earliest in window
- 96%with images
- 303avg words
- software 27,126
- coding 26,370
- development 26,285
- engineering 26,202
- community 26,068
- inclusive 25,983
- ai 22,972
- webdev 16,031
- programming 13,404
- productivity 9,765
- artificial intelligence 9,409
- technology 8,861
- python 7,377
- security 7,224
- devops 7,034
- tutorial 6,339
- agents 5,894
- architecture 5,869
- llm 5,784
- javascript 5,498
- Software Dev. 27,819
- Science & Technology 27,393
- Computers & Electronics 21,161
- Business & Industrial 2,449
- Internet & Telecom 2,219
- Economy, Business & Finance 1,241
- Finance 927
- Arts, Culture, Entertainment & Media 722
Please confirm you are human
This browser or connection looks automated. Press and continuously hold the control for 3 seconds to enable Google-hosted web results and, when separately allowed, AI-assisted answers.
A successful check enables 100 search requests. Interactive access does not authorize scraping, systematic collection, or reuse of search output.
News
The GITHUB_TOKEN in Your.zshrc Is a Time Bomb (And So Is Your.npmrc)
1+ mon, 6+ day ago (526+ words) If you've got a GITHUB_TOKEN sitting in plaintext in your.zshrc right now, this one's for you. And if you've never actually looked inside your.npmrc, I'd bet money there's an _authToken=npm_xxxxxxxx line in there that's been quietly rotting since you set…...
We Planted 10 Vulnerabilities to Test Free Semgrep. It Reported 3.
1+ mon, 4+ week ago (243+ words) Before you read: we are not security experts. We are a small team learning security tooling by... Tagged with security, devops, beginners, testing....
npm Supply Chain RAT: PostCSS Impersonation & Dependency Confusion
2+ mon, 2+ week ago (215+ words) Three malicious npm packages masquerading as PostCSS tools delivered Windows RAT payloads. Analysis of supply chain attack mechanics, payload delivery chains, and detection gaps in dependency management. What makes this particularly effective: PostCSS is a legitimate, widely-used build tool. Developers…...
I discovered a large-scale malware distribution campaign on GitHub
2+ mon, 3+ week ago (746+ words) This is the story of how I found 10,000 repositories on GitHub that distribute Trojan malware. They are all from different contributors, have different names, and are not forks of other repositories. But they share a common pattern, which is what…...
I built a free IDE extension to catch malicious npm packages before they wreck your project
2+ mon, 3+ week ago (161+ words) Supply-chain attacks via npm are up year-over-year — packages like event-stream, the Lazarus group drops, and AI-hallucinated typosquats keep landing in real codebases. I got tired of finding out after the fact, so I built NPM Safety Guard. It scans your…...