npm supply-chain attack hits 400+ packages and steals developer credentials

06/08/2026

A supply-chain attack has affected more than 400 npm packages maintained by unrelated publishers, using compromised package releases to steal developer credentials and spread to other projects. Microsoft Threat Intelligence said the malicious releases contain a variant of the Mini Shai-Hulud worm. Affected packages include software associated with widely used JavaScript ecosystems, such as keyv, […]

The post npm supply-chain attack hits 400+ packages and steals developer credentials appeared first on Developer Tech News.

➪ Continue reading the full article on www.developer-tech.com

I swapped TrueNAS for Debian and Cockpit on my 8GB home server, and got 2.5GB of RAM back

Everyone told me a NAS needs a NAS OS, and for years I believed it. TrueNAS 25.10 ran my home server, and plenty of people keep coming back to it for good reasons. Then I looked at my dashboard and saw 3.2GB of my 8GB of RAM gone before a single file moved. ➪ Continue reading the full article on www.xda-developers.com … [Read More...]

Google just silently raised the price for the Pixel 10a by $100, just over half a year after release

It hasn't been a great few years for purchasing hardware. With the RAM crisis continuing, we've seen price hikes on everything from handheld game consoles to SBCs. Even the once-affordable Raspberry Pi got a price increase due to events getting "unsustainable." ➪ Continue reading the full article on www.xda-developers.com … [Read More...]

Gemini Call for Me might tell your mom you’re running late

Google may be expanding its "Call for Me" AI feature beyond business calls so you can use it to send messages to friends and family. Android Authority reports finding a "Gemini Calling" introductory screen in an APK teardown with examples that include "Call Mom and tell her I will be 15 minutes late" and "Call John and ask if he is coming for dinner." Based on those examples, even with this … [Read More...]

I ignored Obsidian's graph view for years, and it turns out I was looking at the wrong graph

Obsidian's graph view is probably the most satisfying part of the app. If you have hundreds or thousands of notes, opening it gives you a really cool-looking interconnected web of dots, and everything is clickable. This graph view also seems to be a core part of second brain setups, and it can make any folder of markdown look a lot cleaner than it is. But getting something out of it is a different … [Read More...]

4 Waze alternatives that give me Android Auto navigation without the privacy baggage

Google Maps is great, and Waze is even better when I need up-to-date road-condition information. Between road reports and effective rerouting, it makes getting where I want to be exceptionally easy. But a navigation app is more than that. Whether it relies on a constant data connection or collects more information about me than I'm willing to share. ➪ Continue reading the full article on … [Read More...]

Lucid Motors’ EV output falls to lowest level in almost two years

The company is deliberately limiting production after years of struggling to find mass-market demand for its EVs. ➪ Continue reading the full article on techcrunch.com … [Read More...]

I use Obsidian as the front end for my home lab, and it took one plugin

While I continue building and managing my home lab, I keep a handful of browser tabs open. One shows the Proxmox dashboard for my HP ProDesk 600 G6, with the different VMs and LXCs on the mini PC. A second tab is the router's admin page, a third is Home Assistant, and a fourth is Jellyfin. Switching between these tabs is faster with keyboard shortcuts, but it can get tiring. ➪ Continue reading … [Read More...]

Super Mario Bros. Wonder now runs natively on PC without emulation, and Nintendo probably isn't happy about it

The retro game PC port world keeps kicking things up a notch. ➪ Continue reading the full article on www.xda-developers.com … [Read More...]

Reverse-engineered games: All the news on video game decomps, recomps, VR and web and 3D ports

It's a wild time for retro gaming. Thanks to decompilations and recompilations of classic titles, those games are becoming unshackled from their proprietary code and original hardware to be ported to new devices or updated in ways to completely change the original game. Ever imagined skateboarding in Call of Duty? Or playing the original Halo right in your web browser, complete with multiplayer? … [Read More...]

The Matic is the first robovac to get an FCC ban waiver, not that it needs it

The Matic is our favorite robot vacuum and robo-mop, and it's also now the first to escape the FCC's Roomba ban. Well, sort of - because the Matic wasn't banned to begin with. Here's what's actually happening: On October 2nd, the FCC added the original Matic, model 4MA0001, and its charging dock model 4DK0008 to its ban waiver list. That allows the FCC to approve these radio products for import, … [Read More...]