Post

🚨🚨🚨 New incident of libraries containing malware. This feels like a weekly thing now. github.com/valor-softwa...

github.comNewly published NPM versions contain malware · Issue #6776 · valor-software/ngx-bootstrapRecently published versions 20.0.4, 20.0.5, 20.0.6, 19.0.3 and 18.1.4 contain a post-install script bundle.js that seems to pull various tokens (GitHub, NPM, AWS, GCP) and attempts to exfiltrate cl...

15/9/25, 8:47 pm4 reposts4 likes

Amias Channer

@amias.net

16 Sept 2025

JavaScript was a mistake

Eric Lee

@sdust.dev

16 Sept 2025

not sure if the language should be the blame for this

Amias Channer

@amias.net

16 Sept 2025

Most of this happens because there is so little core JavaScript and so much important stuff in tiny hardly maintained libraries that are easy targets.