Socket5w5 weeks ago

Tanstack NPM Packages Compromised in Ongoing Supply-Chain Attack (opens in new tab)

Covered by 9 sources See all sources covering this story including BleepingComputer, This Week In 4n6Discussed on Hacker News and r/reactjs

Feeds

Socket socket.dev

Socket fights vulnerabilities and provides visibility, defense-in-depth, and proactive supply chain protection for JavaScript, Python, and Go dependencies.

Introducing Repository Access Permissions and Custom Roles1d1 day ago

Socket MCP Adds Org Alerts, Threat Feed Review, and Package Inspection2d2 days ago

Socket Firewall Now Blocks Malicious VS Code and Open VSX Extensions3d3 days ago

+4 more in the past week

/r/ReactJS - The Front Page of React reddit.com

A community for discussing anything related to the React UI framework and its ecosystem. Join the Reactiflux Discord (reactiflux.com) for additional React discussion and help.

[Showoff] React Native 0.86, Charting Your Financial Ruin, and the Junk Drawer in Your Package.json2d2 days ago

Open-source React UI and D-pad focus engine for Meta Ray-Ban Display2d2 days ago

Plan and build products3d3 days ago

+6 more in the past week

Pinboard (recent) feeds.pinboard.in

Using bc, Part 112h12 hours ago

Unix Programming12h12 hours ago

Unix BC Programming12h12 hours ago

+87 more in the past day

TLDR FEED Feed bullrich.dev

World Cup Crypto Fraud Wave: Why Betting Markets Need Better Fan-Safety UX (9 minute read)2d2 days ago

Agents breaking on real websites? See how Browserbase runs 35M+ sessions a month (Sponsor)2d2 days ago