A poisoned npm package infected 140+ projects with a hidden payload. This report highlights how to detect, hunt, and defend ...

I gave Claude access to my Home Assistant. It helped me audit, debug, and improve my smart home better than I ever could have.

Needle DI is a lightweight, TypeScript-first library for dependency injection (DI). It is designed to be both easy to use and highly efficient. Permission is hereby granted, free of charge, to any ...

The tool has already blocked more than 52,000 risky npm packages as supply chain attacks continue to hit software teams.

The Miasma supply chain campaign has sparked a fresh attack wave called Hades, this time involving 37 malicious wheel artifacts across 19 packages in the Python Package Index (PyPI) registry, as the ...

Microsoft has found a malicious Chrome extension that posed as the AI search engine Perplexity and quietly logged what people searched for. It routed every query and every character typed into the ...

MCP tool poisoning turns trusted AI agents into a control plane for data loss. Learn how threat actors manipulate tool ...

Notion has been off my radar for a while now. The open-source and local app world is where most of my note-taking and PKM stuff lives these days, and Obsidian is the one I'd point to as my favorite ...