Breaking of "colors" and "faker" NPM libraries show that everything isn't right in the FOSS ecosystem open source Article 948 words 7 votes
StandardJS, a Javacript linter config with 3 million downloads/month starts showing advertisements in users terminals open source Link 20 votes
npm package "eslint-scope" compromised, npm is invalidating all login tokens created before 2018-07-12 12:30 UTC security Link 16 votes