千余npm开源套件被植入恶意窃取蠕虫

IT之家 8 月 5 日消息，安全公司 StepSecurity 披露，热门 Java 套件 keyv 的维护者 Jared Wray 的 GitHub 账号遭到入侵，黑客获得了其管理项目的代码修改和发布权限，并随机向旗下 11 个 npm ...

开发者账号遭入侵致四百余个开源包被污染

IT时代网8月5日消息，一家安全机构披露，热门 Java 工具库 keyv 的维护者 GitHub 账号被人攻破，攻击者拿到了代码修改与版本发布权限，随即在其管理的 11 个 npm 包里塞进了窃取凭证的恶意蠕虫。事情没有停在这 11 个包上——蠕虫顺着被污染的软件包继续偷取其他开发者的发布凭证，不到 4 小时就扩散至另外 433 个软件包，受污染总数达到 444 个，牵涉 2212 个恶意版本和 ...
InfoWorld

Visual Studio Code 1.132 advances built-in dictation

Latest update to Microsoft’s code editor improves dictation, introduces side chats, and adds support for comments to provide ...
How-To Geek on MSN

I tested over 100 Claude Code plugins—here are the 5 that actually matter

I installed over 100 Claude Code plugins so you don't have to. Here's the signal from the noise.
HackerNoon

A Netflix Engineer Built a Free Tool That Cuts Your AI Token Bill by 88%

A Netflix senior engineer built Headroom, an open-source context compression layer that cuts AI token usage by 60–95% with ...
Jakarta Globe

Jakarta Police Investigate Discovery of Nearly 1,000 Weapons-Related Items at School

Police are investigating after a Jakarta school reported finding nearly 1,000 weapons-related items in a former foundation ...
The Tech Edvocate

Discord iOS vs Android version comparison

Spread the loveWhen you’re trying to keep up with friends, guildmates, or even professional communities, Discord has become ...
51CTO

26 年 AI 时代下的 15 个 C/C++ 开源项目推荐

今天给大家分享一些在 26 年 AI 时代，非常优质的 C/C++ 项目。这些项目指的是：C/C++ 主导底层架构或关键性能路径的 AI 基础设施项目。 大家好，我是蟹老板~ 以前我们学习 C/C++，练习方向大多是服务器开发、嵌入式、音视频、游戏引擎。 但进入AI爆发的时代，C ...
Australian Broadcasting Corporation

ABC Pacific

ABC Radio Australia launches WhatsApp Channel pilot to connect with new Pacific audiences ...