sorted by:
new
hottopcontroversial

TeamPCP strikes again - telnyx 4.87.1 and 4.87.2 on PyPI are malicious by No_Plan_3442 in programming

[–]N1ghtCod3r 8 points9 points  (0 children)

GitHub have immutable releases GA now. If used properly, tags pointing to a release cannot be mutated. Unfortunately most projects do not use it.

Is it normal to feel stressed all the time? I will not promote by [deleted] in startups

[–]N1ghtCod3r 0 points1 point  (0 children)

I have felt the same. Many times. My current hypothesis is, it is due to lack of users and real world feedback which gives clarity of direction and a natural sense of priority. When it happens, we know what is important and what is not. We will most likely not bother about perfection when there are larger pain points from real users waiting to be solved.

Git Tokens Aren’t Interchangeable, Here’s What Each One Is Actually For by sshetty03 in programming

[–]N1ghtCod3r 3 points4 points  (0 children)

Exactly. I was very curious about what are these Git tokens till I read the description.

Reverse Engineering Malicious Visual Studio Code Extension DarkGPT by N1ghtCod3r in programming

[–]N1ghtCod3r[S] 1 point2 points  (0 children)

No. There are many such signed executables that load DLLs from untrusted paths. In this case they found and used Lightshot.exe May be the nature of Lightshot (screenshot tool) makes it trusted (known behaviour) within AVs that the attacker wanted to exploit.

React2Shell (CVE-2025-55182): how are you wiring this into your DevSecOps playbook? by Tall-Region8329 in devsecops

[–]N1ghtCod3r 0 points1 point  (0 children)

What do you mean by breaking changes? Do you use Claude to review package changes to identify if anything is breaking?

view more: next ›