A lot of blogs on this are AI generated and such as this is developing, so just linking to a bunch of resources out there:Socket:- Sep 15 (First post on breach): <a href="https:&#x2F;&#x2F;socket.dev&#x2F;blog&#x2F;tinycolor-supply-chain-attack-affects-40-packages" rel="nofollow">https:&#x2F;&#x2F;socket.dev&#x2F;blog&#x2F;tinycolor-supply-chain-attack-affect...</a>- Sep 16: <a href="https:&#x2F;&#x2F;socket.dev&#x2F;blog&#x2F;ongoing-supply-chain-attack-targets-crowdstrike-npm-packages" rel="nofollow">https:&#x2F;&#x2F;socket.dev&#x2F;blog&#x2F;ongoing-supply-chain-attack-targets-...</a>StepSecurity – <a href="https:&#x2F;&#x2F;www.stepsecurity.io&#x2F;blog&#x2F;ctrl-tinycolor-and-40-npm-packages-compromised" rel="nofollow">https:&#x2F;&#x2F;www.stepsecurity.io&#x2F;blog&#x2F;ctrl-tinycolor-and-40-npm-p...</a>Aikido - <a href="https:&#x2F;&#x2F;www.aikido.dev&#x2F;blog&#x2F;s1ngularity-nx-attackers-strike-again" rel="nofollow">https:&#x2F;&#x2F;www.aikido.dev&#x2F;blog&#x2F;s1ngularity-nx-attackers-strike-...</a>Ox - <a href="https:&#x2F;&#x2F;www.ox.security&#x2F;blog&#x2F;npm-2-0-hack-40-npm-packages-hit-in-major-supply-chain-attack&#x2F;" rel="nofollow">https:&#x2F;&#x2F;www.ox.security&#x2F;blog&#x2F;npm-2-0-hack-40-npm-packages-hi...</a>Safety - <a href="https:&#x2F;&#x2F;www.getsafety.com&#x2F;blog-posts&#x2F;shai-hulud-npm-attack" rel="nofollow">https:&#x2F;&#x2F;www.getsafety.com&#x2F;blog-posts&#x2F;shai-hulud-npm-attack</a>Phoenix - <a href="https:&#x2F;&#x2F;phoenix.security&#x2F;npm-tinycolor-compromise&#x2F;" rel="nofollow">https:&#x2F;&#x2F;phoenix.security&#x2F;npm-tinycolor-compromise&#x2F;</a>Semgrep - <a href="https:&#x2F;&#x2F;semgrep.dev&#x2F;blog&#x2F;2025&#x2F;security-advisory-npm-packages-using-secret-scanning-tools-to-steal-credentials&#x2F;" rel="nofollow">https:&#x2F;&#x2F;semgrep.dev&#x2F;blog&#x2F;2025&#x2F;security-advisory-npm-packages...</a>

Shai-Hulud malware attack: Tinycolor and over 40 NPM packages compromised

Things you can do with a Software Defined Radio (2024)

Denmark close to wiping out cancer-causing HPV strains after vaccine roll-out

Waymo has received our pilot permit allowing for commercial operations at SFO

Apple Photos App Corrupts Images

GNU Midnight Commander

Doom crash after 2.5 years of real-world runtime confirmed on real hardware

How to make the Framework Desktop run even quieter

The Asus Gaming Laptop ACPI Firmware Bug: A Deep Technical Investigation

I built my own phone because innovation is sad rn [video]

EU Chat Control: Germany's position has been reverted to UNDECIDED

A dumb introduction to z3

Determination of the fifth Busy Beaver value

Notion API importer, with Databases to Bases conversion bounty

I got the highest score on ARC-AGI again swapping Python for English

Alibaba's New AI Chip Unveiled: Key Specifications Comparable to H20

AMD Open Source Driver for Vulkan project is discontinued

PureVPN IPv6 Leak

Firefox 143 for Android to introduce DoH

Why We're Building Stategraph: Terraform State as a Distributed Systems Problem