Find similar content

npmjs.org 被用来托管《武林外传》视频及弹幕。 - Sonatype 发现 npm 上的 748 个包名以 wlwz 开头的包里的 .ts 文件并不是 TypeScript 源代码，而是视频文件 (MPEG-TS)。 - 虽然文章中没有写明，但中文订户大概能看出视频的内容是《武林外传》剧集。 blog.sonatype.com/~ linksrc: https://www.v2ex.com/t/1012222 #npm

又到了 #NPM 新闻时间。 https://t.me/outvivid/3526

Sometimes dependencies can just get as messy as it could. #NodeJS#npm 🐦

#npm#nodejs#dasturlash_hayoti NPM — paketlar, package.json va oddiy qo‘llanma NPM — Node.js ekotizimidagi paketlar ombori va paket menejeri. package.json loyihaning “pasporti”. Boshlash: npm init -y # package.json yaratadi npm install express # express o'rnatish (dependencies) npm install -D nodemon # ishlab chiqishda dev dependency package.json skript misoli: "scripts": { "start": "node index.js", "dev": "nodemon index.js", "test": "jest" } Eslatma: ◾️package-lock.json loyihaning qat’iy versiyalarini saqlaydi — uni gitga qo‘yish kerak. ◾️node_modules/➡️.gitignore ga qo‘ying (reponing ichiga kiritmang). ◾️npm audit bilan xavfsizlik tekshiruvini bajaring. Maslahat: ◾️Kichik loyihalarda ham scripts dan foydalaning — bir buyruq bilan test, build va start qilinadi. ◾️Global o‘rniga lokal paketlarni afzal ko‘ring (-g dan saqlaning). NPM bilan ishlashni o‘rganish — Node ekosistemida samarali bo‘lishning asosiy sharti. Oramizda 📱Node.js ni biladiganlar bo'lsa reaksiya qoldiring 🔥 💻@dasturlash_hayoti— xatosiz kod bo‘lmaydi😅

[开源] 在手机上继续和你电脑上的 claude code 和 codex 对话 vibe coding 令人上瘾，离开 Codex 和 Claude Code 令人难受！ 所以做了一个远程工具。之前其实就做过一版，原帖在这： <https://v2ex.com/t/1158953> 但是当时自己也没有特别认真地用。最近上瘾程度加深，离开电脑也还想继续和 agent 发消息，于是开始真正高频用了起来。然后马上发现很多地方有点问题，样式也很粗糙，所以这段时间大规模完善了一下，现在项目重新命名为 Roam 。 项目地址： <https://github.com/valueriver/roam> 核心场景还是：**在手机上继续使用电脑里的 Claude Code ... via V2EX 分享创造 标签: #npm#地址#电脑 ⚡️探索号频道 ⚡️探索者频道 ⚡️探索者交流群 ⚡️ Youtube 频道：科技探索者 每天推荐有趣内容，欢迎订阅、转发。

npm 历史上首个蠕虫式供应链攻击：会自我传播 npm 出现了新攻击方式：TanStack Router 官方 npm 包被植入恶意代码。攻击者入侵了项目发布流程，上传了带后门的官方版本。这些包会窃取开发者电脑里的各种密钥，并尝试继续感染开发者拥有权限的其他 GitHub 仓库，再借 npm 进一步传播。 令人绝望的是：它绕过了现代 npm 生态最核心的一整套“信任链”： ⦁ 发布者是真的 ⦁ 官方账号是真的 ⦁ CI 是真的 ⦁ provenance 是真的 ⦁ npm 签名也是真的 但发布出去的代码，是恶意的。 另外，有安全研究员认为，这是 npm 历史上第一次出现真正... via 小众软件 标签: #npm#攻击者#官方 ⚡️探索号频道 ⚡️探索者频道 ⚡️探索者交流群 ⚡️ Youtube 频道：科技探索者 每天推荐有趣内容，欢迎订阅、转发。

THE COMPOSITION OF THE COORDINATING COUNCIL OF THE NPM AGAINST TORTURE UNDER THE COMMISSIONER FOR HUMAN RIGHTS IN THE REPUBLIC OF KAZAKHSTAN HAS BEEN UPDATED July 26, 2022 – The next online meeting of the updated composition of the Coordinating Council of the National Preventive Mechanism against Torture (NPM) was held under the chairmanship of the Commissioner for Human Rights in the Republic of Kazakhstan Elvira Azimova. The members of the Coordinating Council discussed issues of strengthening independent monitoring on the ground, interacting with the regional representative offices of the Commissioner, as well as participating in the discussion of draft laws on improving criminal and criminal procedure legislation, taking into account the recommendations of the NPM participants. Within two months, the presentation and discussion of the consolidated NPM report on the results of visits to social institutions, institutions where citizens are located by court decision or based on a verdict will take place. The presentation will be held with the invitation of local self-government bodies and central bodies, including the Prosecutor General's Office, which oversees compliance with the rule of law, representatives of public councils, and boards of trustees of institutions. During the presentation of the report, the participants will talk about the violations identified on the ground. Updated composition of the Coordinating Council By the link: https://www.gov.kz/memleket/entities/ombudsman/press/news/details/401234?lang=ru #Ombudsman#HumanRights#CoordinatingCouncil#NPM https://www.gov.kz/memleket/entities/ombudsman/press/news/details/405528?lang=en

NEW MEMBERS OF THE COORDINATING COUNCIL OF THE NATIONAL PREVENTIVE MECHANISM HAVE BEEN ELECTED On July 5, 2022, a meeting of the commission for the election of members of the Coordinating Council for the activities of the National Preventive Mechanism (NPM) was held. The Commission under the Commissioner for Human Rights included: Deputy of the Senate of the Parliament of the Republic of Kazakhstan Nurlan Beknazarov, Deputy Prosecutor General of the Republic of Kazakhstan Asset Chindaliev, Head of the National Center for Human Rights Zere Utebayeva, Secretary of the Human Rights Commission under the President of the Republic of Kazakhstan Tastemir Abishev, Executive Director of the Charter for Human Rights Public Foundation Zhemis Turmagambetova, Director Kazakhstan International Bureau for Human Rights and Rule of Law Yevgeny Zhovtis, Commissioner for Children's Rights in Kazakhstan Aruzhan Sayn, Head of the Department of Effective Governance and Territorial Development of the United Nations Development Program in Kazakhstan Ainur Baymyrza, Director of the Center for Applied Research TALAP Rahim Oshakbayev. According to the results of a secret ballot, 10 citizens of Kazakhstan were elected from among the citizens who submitted their applications for participation in the activities of the NPM for the prevention of torture and ill-treatment. The updated list of members of the Coordinating Council will be available on the website of the Commissioner for Human Rights in the Republic of Kazakhstan at the link: https://www.gov.kz/memleket/entities/ombudsman/activities/1030?lang=ru. #Ombudsman#HumanRights#CoordinatingCouncil#NPM

Another npm supply-chain attack npm 软件包库再次遭遇供应链攻击，影响超过 40 个包，涉及多个维护者。其中，每周下载量达 220 万的 @ctrl/tinycolor 被恶意更新，植入的 NpmModule.updatePackage 函数会下载包、篡改 package.json、注入本地脚本 bundle.js，并重新打包发布，导致下游包自动被木马化。 原文链接：https://socket.dev/blog/tinycolor-supply-chain-attack-affects-40-packages #网络安全#npm#供应链攻击#JavaScript #AIGC Read more

ОМБУДСМЕН И ПРАВОЗАЩИТНИКИ ОБСУДИЛИ КОНСТИТУЦИОННЫЕ ПОПРАВКИ, ВЫНОСИМЫЕ НА РЕСПУБЛИКАНСКИЙ РЕФЕРЕНДУМ 2 июня в формате онлайн состоялась дискуссия с участием Омбудсмена и участников Национального превентивного механизма в связи с конституционными поправками, выносимыми на республиканский референдум. Он пройдёт 5 июня 2022 года. Участники встречи обменялись мнениями по предлагаемым поправкам и предстоящей законотворческой работе по их реализации. Напомним, что принятие поправок в Конституцию повлечёт внесение изменений в действующие законы и принятие новых трёх конституционных законов - о Конституционном суде, прокуратуре и Уполномоченном по правам человека. В ходе обсуждения правозащитники озвучили рекомендации по обеспечению эффективности предстоящего законотворческого процесса, широком обсуждении проектов законов, которые будут разработаны в реализацию конституционных поправок. Правозащитники обозначили основные моменты, на которые должны обратить внимание разработчики проектов законов, чтобы не допустить превышение полномочий со стороны государственных органов при реализации новых конституционных механизмов. Участники встречи обменялись мнениями относительно принятого второго плана Правительства о дальнейших мерах в области прав человека и верховенства закона. Правозащитники предложили алгоритм действий, усиливающий новый механизм защиты конституционных прав и свобод граждан и выразили готовность участвовать в его разработке и обсуждении. #ОмбудсменKZ#ПраваЧеловека#NPM#НПМ

硬件钱包厂商 Ledger 前雇员遭受钓鱼攻击，导致其项目被骇；用户资产可能进入骇客钱包。 - Ledger 的声明称，Ledger Connect Kit [1] 被发布三个恶意版本 (1.1.5/1.1.6/1.1.7)。恶意版本会将用户的资产转移到骇客钱包。 - Ledger 提供的骇客钱包地址中目前有现时价值约 10 万美元的代币。 - 此行为所利用的 WalletConnect 项目已被关停；Tether 也已经冻结此地址上的 USDT 代币。 https://twitter.com/Ledger/status/1735326240658100414 1. npm:@ledgerhq/connect-kit #Ledger#npm#Security#Crypto

【好玩儿的Docker项目】家里没有公网IP？FRP+NPM+VPS = 随时随地用域名访问家里的任何设备！内网穿透，从未如此简单！ 这是我觉得好用的方案，就算你有公网但是你80 443端口肯定是关闭的，谁喜欢域名：端口的链接啊（如果你不讲究的话） ps：这玩意儿我会，只是可能忘了存和分享（垃圾桶可能存了也可能没存反正没找到😁，应该是没弄#标识）， 我平时刷的视频很多（我不是咕咕鸽/不良林/epcdiy/悟空的日常/VedioTalk/科技lion/黑大帅的潇洒哥_/jack_stone/五更百鬼/韩风Talk/without_answer/孔昊天的折腾日记等等等等。。。），垃圾桶很多东西都是摘自这些UP🐖，感兴趣的也可以去瞅瞅，当然也可以在评论区列出你觉得优质的UP🐖 #分享 #反代 #frp #npm