
neon
102 posts



UPDATE: So far we've identified 639 compromised npm package versions across 323 unique packages in tonight’s Mini Shai-Hulud wave. That includes 558 versions across 279 unique @antv packages. Most were detected within ~6 minutes of publication. socket.dev/blog/antv-pack…



can you get a perfect score?

NEW THIS MORNIG: The biggest donor in the 2026 midterms? Andreessen Horowitz. The firm has spent $115 million on politics this cycle, a never-before-seen investment by a venture capital firm to shape American politics, crypto and AI. Inside the strategy, at the link.

Shai-Hulud, that spoopy Git worm thingy everyones been yapping about, was open-sourced. Unfortunately, GitHub has removed the repo. This is terrible news. It can no longer be studied... unless there was someone who collected this sort of thing and has a local copy...

I've got PhD level intelligence on tap but no PhD level questions to ask it



The 1883 Krakatoa eruption is the loudest sound ever at 310 dB It was heard up to 3,000 miles away, burst the eardrums of people 40 miles away, and circled the Earth 7 times











