Post

Web Awesome
@webawesome.com

⚠️ SECURITY ALERT: An npm dependency used by Web Awesome was compromised a few hours ago. This ONLY affects npm installs — CDN users are safe. DO NOT install Web Awesome via npm right now. New unaffected version is publishing now…

Web Awesome
@webawesome.com

bsky.app/profile/sock...

Socket@socket.dev

🚨 Malicious update to @ctrl/tinycolor on npm is part of an active supply chain attack hitting 40+ packages across multiple maintainers. Audit & remove affected versions. Our analysis of the malware: socket.dev/blog/tinycol... #NodeJS #JavaScript

socket.devPopular Tinycolor npm Package Compromised in Supply Chain At...Malicious update to @ctrl/tinycolor on npm is part of a supply-chain attack hitting 40+ packages across maintainers
Web Awesome
@webawesome.com

Update: bsky.app/profile/weba...

Web Awesome@webawesome.com

Web Awesome 3.0.0-beta.6 has just been published to npm. This version is safe to use, as it pins the affected dependency to the last safe version. You can update to 3.0.0-beta.6 by running the following command: npm i @awesome.me/webawesome@3.0.0-beta.6

0 reposts1 like

No replies yet.