🚨 Malicious update to @ctrl/tinycolor on npm is part of an active supply chain attack hitting 40+ packages across multiple maintainers. Audit & remove affected versions.
Our analysis of the malware: socket.dev/blog/tinycol... #NodeJS #JavaScript
A versioned archive of posts from Bluesky, Mastodon, GitHub, npm, YouTube, Hacker News, and blogs. See the most popular posts.
Last built .
| Since | posts | replies | likes | reposts and quotes | views | |
|---|---|---|---|---|---|---|
| Bluesky | 670 | 761 | 4,245 | 920 | ||
| Mastodon | 358 | 509 | 2,144 | 930 | ||
| npm | 56 | 465 | 889,066,549 | |||
| YouTube | 31 | 847 | 28,872 | |||
| Blog | 63 | |||||
| Podcast | 93 | |||||
| Hacker News | 6 | 311 | 384 | |||
| All | 1,430 | 1,581 | 7,620 | 1,850 | 889,095,421 |
🚨 Malicious update to @ctrl/tinycolor on npm is part of an active supply chain attack hitting 40+ packages across multiple maintainers. Audit & remove affected versions.
Our analysis of the malware: socket.dev/blog/tinycol... #NodeJS #JavaScript