Profile

<Tech News/>

Stay updated with the latest technology trends, programming insights, and industry developments

pip install could have been hijacked: I tested every trust store on my Mac against the compromised eMudhra chain
Featured Dev.to

pip install could have been hijacked: I tested every trust store on my Mac against the compromised eMudhra chain

The eMudhra keys that were 4, 56 and 115 could have signed a fake pypi.org and turned pip install into arbitrary code delivery. The Python ecosystem fixed itself in five days. I ran the four-way test on my machine: Apple's tools still accept the chain, Python refuses it. Every command included.

5 hours ago Read Article
My open source project is brand new and already has contributors. Here's what I did.
Dev.to Web Development
My open source project is brand new and already has contribu...

In the spirit of Hacktoberfest, with it being the last day of October, I wanted to share my story...

8 hours ago Read
Thank You, Anthropic: Every Startup That Rejected Me Is Now Obsolete
Dev.to Tech Startups
Thank You, Anthropic: Every Startup That Rejected Me Is Now...

Hey everyone 👋, I want to start with something I rarely do, which is express genuine and unambiguo...

12 hours ago Read
We Need to Talk About How Gross Modern Web Design Has Become (And How We Built an AI to Catch It)
Dev.to Web Development
We Need to Talk About How Gross Modern Web Design Has Become...

Let me paint a picture I know you’ve experienced recently. You’re trying to book a flight, buy...

13 hours ago Read
Multi-Tenant MCP: Isolation Patterns That Hold Up
Dev.to Cloud Computing
Multi-Tenant MCP: Isolation Patterns That Hold Up

Every multi-tenant MCP deployment starts with the same instinct: put a tenant_id in the JWT, scope.....

15 hours ago Read
Is Rec Room Shutting Down? The Real Reason a $3.5B Platform Collapsed
Dev.to Tech Startups
Is Rec Room Shutting Down? The Real Reason a $3.5B Platform...

TL;DR Rec Room is not "shutting down" anymore. It already did, at noon Pacific on June 1,...

16 hours ago Read
A trojanized Claude Code extension plants an SSH backdoor: the 7-point audit for your machine
Dev.to Cybersecurity
A trojanized Claude Code extension plants an SSH backdoor: t...

[email protected] on Open-VSX carried a 66-line loader that SSH-backdoored your machine...

16 hours ago Read
Giving AI Pain: The Architecture of Synthetic Scars & The Rapid-Regret Miner
Dev.to Programming & Development
Giving AI Pain: The Architecture of Synthetic Scars & The Ra...

Why 90% of AI coding frustration comes from the Quota vs. Prompt-Compliance Death Loop, why Rich Sut...

1 day ago Read
Yes, {} + [] = 0. No, JavaScript Isn’t Broken
Dev.to Programming & Development
Yes, {} + [] = 0. No, JavaScript Isn’t Broken

JavaScript is a legendary programming language. Created in the mid-1990s in just 10 days, it was bor...

1 day ago Read
Welcome to the Prompt Pad: AI Tips & Tricks with Rosendo Pili
Dev.to AI & Machine Learning
Welcome to the Prompt Pad: AI Tips & Tricks with Rosendo Pil...

Keeping up with AI is a full-time job. Prompt Pad is here to help you keep up a little at a...

1 day ago Read
A Message From Our Founder: On the Winding Down of LaaSy™
Dev.to Tech Startups
A Message From Our Founder: On the Winding Down of LaaSy™

It is with a heavy heart, and a considerably heavier wool inventory, that I announce LaaSy™ will...

1 day ago Read
How much does it cost to fix a Lovable app?
Dev.to Tech Startups
How much does it cost to fix a Lovable app?

Anywhere from about $35 to $40,000, depending on who does the work and how much of the app needs it....

1 day ago Read
GitHub Trending

jakubwarkusz/themes: A modern, fully-featured theme management li...

⭐ 125 stars • TypeScript • A modern, fully-featured th...

goruck/home-generative-agent: AI agent for Home Assistant — talk...

⭐ 368 stars • Python • AI agent for Home Assistant — t...

N3oRay/proton-autogen: Proton-Autogen is a lightweight Linux util...

⭐ 127 stars • Python • Proton-Autogen is a lightweight...

mother-of-all-self-hosting/mash-playbook: 🐋 Ansible playbook whi...

⭐ 1165 stars • Python • 🐋 Ansible playbook which help...

ApeWorX/silverback: Listen and respond to on-chain events in real...

⭐ 133 stars • Python • Listen and respond to on-chain...

mholzi/beatify: 🎵 Music quiz party game for Home Assistant with...

⭐ 232 stars • Python • 🎵 Music quiz party game for Ho...

processing/p5.js-web-editor: The p5.js Editor is a website for cr...

⭐ 1717 stars • JavaScript • The p5.js Editor is a webs...

william-ricchiuti/OpenCode-goal-plugin: Session-scoped /goal work...

⭐ 285 stars • JavaScript • Session-scoped /goal workfl...

hackclub/sprig: 🍃 Learn to code by making games in a JavaScript...

⭐ 1117 stars • JavaScript • 🍃 Learn to code by making...

MegaManSec/magic-switch: Magic Switch is a simple macOS menu bar...

⭐ 168 stars • Swift • Magic Switch is a simple macOS m...

6pac/SlickGrid: A lightning fast JavaScript grid/spreadsheet

⭐ 2072 stars • TypeScript • A lightning fast JavaScrip...

yonatangross/orchestkit: The Complete AI Development Toolkit for...

⭐ 299 stars • TypeScript • The Complete AI Development...

roboflow/trackers: Trackers gives you clean, modular re-implement...

⭐ 3968 stars • Python • Trackers gives you clean, modu...

neuro-galaxy/torch_brain: A library for designing and training de...

⭐ 105 stars • Python • A library for designing and tra...

moorcheh-ai/memanto: Memory that AI Agents Love!

⭐ 2350 stars • Python • Memory that AI Agents Love!

dbt-labs/dbt-mcp: A MCP (Model Context Protocol) server for inter...

⭐ 614 stars • Python • A MCP (Model Context Protocol)...

Greminn/ha-spatial-context: Trace your floor plans, place your re...

⭐ 121 stars • JavaScript • Trace your floor plans, pla...

stashapp/stash-box: Stash App's own OpenSource video indexing and...

⭐ 379 stars • Go • Stash App's own OpenSource video in...

dagucloud/dagu: Self-hostable workflow orchestrator for teams who...

⭐ 4505 stars • Go • Self-hostable workflow orchestrato...

transferia/transferia: Open Source Cloud Native Ingestion engine

⭐ 194 stars • Go • Open Source Cloud Native Ingestion...
Sources: Dev.to Guardian Hashnode HN Reddit
Chat with me