Profile

<Tech News/>

Stay updated with the latest technology trends, programming insights, and industry developments

pip install could have been hijacked: I tested every trust store on my Mac against the compromised eMudhra chain
Featured Dev.to

pip install could have been hijacked: I tested every trust store on my Mac against the compromised eMudhra chain

The eMudhra keys that were 4, 56 and 115 could have signed a fake pypi.org and turned pip install into arbitrary code delivery. The Python ecosystem fixed itself in five days. I ran the four-way test on my machine: Apple's tools still accept the chain, Python refuses it. Every command included.

6 hours ago Read Article
My open source project is brand new and already has contributors. Here's what I did.
Dev.to Web Development
My open source project is brand new and already has contribu...

In the spirit of Hacktoberfest, with it being the last day of October, I wanted to share my story...

10 hours ago Read
Thank You, Anthropic: Every Startup That Rejected Me Is Now Obsolete
Dev.to Tech Startups
Thank You, Anthropic: Every Startup That Rejected Me Is Now...

Hey everyone πŸ‘‹, I want to start with something I rarely do, which is express genuine and unambiguo...

13 hours ago Read
We Need to Talk About How Gross Modern Web Design Has Become (And How We Built an AI to Catch It)
Dev.to Web Development
We Need to Talk About How Gross Modern Web Design Has Become...

Let me paint a picture I know you’ve experienced recently. You’re trying to book a flight, buy...

14 hours ago Read
Multi-Tenant MCP: Isolation Patterns That Hold Up
Dev.to Cloud Computing
Multi-Tenant MCP: Isolation Patterns That Hold Up

Every multi-tenant MCP deployment starts with the same instinct: put a tenant_id in the JWT, scope.....

16 hours ago Read
Is Rec Room Shutting Down? The Real Reason a $3.5B Platform Collapsed
Dev.to Tech Startups
Is Rec Room Shutting Down? The Real Reason a $3.5B Platform...

TL;DR Rec Room is not "shutting down" anymore. It already did, at noon Pacific on June 1,...

17 hours ago Read
A trojanized Claude Code extension plants an SSH backdoor: the 7-point audit for your machine
Dev.to Cybersecurity
A trojanized Claude Code extension plants an SSH backdoor: t...

[email protected] on Open-VSX carried a 66-line loader that SSH-backdoored your machine...

17 hours ago Read
Stop Using cat for Everything: 9 Better Ways to Read Linux Files
Dev.to Cloud Computing
Stop Using cat for Everything: 9 Better Ways to Read Linux F...

Practical tools to inspect, page, slice, and debug files without freezing your...

21 hours ago Read
Giving AI Pain: The Architecture of Synthetic Scars & The Rapid-Regret Miner
Dev.to Programming & Development
Giving AI Pain: The Architecture of Synthetic Scars & The Ra...

Why 90% of AI coding frustration comes from the Quota vs. Prompt-Compliance Death Loop, why Rich Sut...

1 day ago Read
Yes, {} + [] = 0. No, JavaScript Isn’t Broken
Dev.to Programming & Development
Yes, {} + [] = 0. No, JavaScript Isn’t Broken

JavaScript is a legendary programming language. Created in the mid-1990s in just 10 days, it was bor...

1 day ago Read
Welcome to the Prompt Pad: AI Tips & Tricks with Rosendo Pili
Dev.to AI & Machine Learning
Welcome to the Prompt Pad: AI Tips & Tricks with Rosendo Pil...

Keeping up with AI is a full-time job. Prompt Pad is here to help you keep up a little at a...

1 day ago Read
A Message From Our Founder: On the Winding Down of LaaSyβ„’
Dev.to Tech Startups
A Message From Our Founder: On the Winding Down of LaaSyβ„’

It is with a heavy heart, and a considerably heavier wool inventory, that I announce LaaSyβ„’ will...

1 day ago Read
GitHub Trending

once-ui-system/magic-portfolio: ⚑ Build your timeless portfolio...

⭐ 1421 stars β€’ TypeScript β€’ ⚑ Build your timeless por...

mattiacerutti/supernova: A fast, opinionated development environm...

⭐ 192 stars β€’ TypeScript β€’ A fast, opinionated develop...

spessasus/SpessaSynth: MIDI SoundFont/DLS player and editor writt...

⭐ 418 stars β€’ TypeScript β€’ MIDI SoundFont/DLS player a...

clastix/kamaji: Kamaji is the Hosted Control Plane Manager for Ku...

⭐ 2072 stars β€’ Go β€’ Kamaji is the Hosted Control Plane...

wildminder/ComfyUI-Chatterbox: ComfyUI Chatterbox TTS & Voice Con...

⭐ 105 stars β€’ Python β€’ ComfyUI Chatterbox TTS & Voice...

RITlug/teleirc: Go implementation of a Telegram <=> IRC bridge fo...

⭐ 157 stars β€’ Go β€’ Go implementation of a Telegram <=>...

NVIDIA-NeMo/Megatron-Bridge: Training library for Megatron-based...

⭐ 973 stars β€’ Python β€’ Training library for Megatron-b...

linkml/linkml: Linked Open Data Modeling Language

⭐ 678 stars β€’ Python β€’ Linked Open Data Modeling Langu...

google/go-github: Go library for accessing the GitHub v3 API

⭐ 11330 stars β€’ Go β€’ Go library for accessing the GitH...

fer0n/Unwatched: RSS feed based YouTube video player for iOS, mac...

⭐ 557 stars β€’ Swift β€’ RSS feed based YouTube video pla...

ucfopen/UDOIT: The Universal Design Online content Inspection Too...

⭐ 117 stars β€’ JavaScript β€’ The Universal Design Online...

gitkraken/vscode-gitlens: Supercharge Git inside VS Code and unlo...

⭐ 9961 stars β€’ TypeScript β€’ Supercharge Git inside VS...

jtydhr88/ComfyArt: The open-source, fully local design canvas

⭐ 401 stars β€’ TypeScript β€’ The open-source, fully loca...

meta-pytorch/attention-gym: Helpful tools and examples for workin...

⭐ 1262 stars β€’ Python β€’ Helpful tools and examples for...

huggingface/trl: Train transformer language models with reinforce...

⭐ 19635 stars β€’ Python β€’ Train transformer language mo...

int128/kauthproxy: Local authentication proxy for Kubernetes Dash...

⭐ 113 stars β€’ Go β€’ Local authentication proxy for Kube...

marko-js/marko: A declarative, HTML-based language that makes bui...

⭐ 14468 stars β€’ JavaScript β€’ A declarative, HTML-based...

jakubwarkusz/themes: A modern, fully-featured theme management li...

⭐ 125 stars β€’ TypeScript β€’ A modern, fully-featured th...

goruck/home-generative-agent: AI agent for Home Assistant β€” talk...

⭐ 368 stars β€’ Python β€’ AI agent for Home Assistant β€” t...

N3oRay/proton-autogen: Proton-Autogen is a lightweight Linux util...

⭐ 127 stars β€’ Python β€’ Proton-Autogen is a lightweight...
Sources: Dev.to Guardian Hashnode HN Reddit
Chat with me