TGViewer
Qishloqi 👨‍💻 Qishloqi 👨‍💻 @qishloqi_dev · 56 subscribers
Post #84 190
Ohirgi paytlar "Supply chain attack"lar ko'zga tashlana boshladi.

Masalan: https://www.ox.security/blog/npm-2-0-hack-40-npm-packages-hit-in-major-supply-chain-attack/

Bunday attacklarga qarshi Obsidian jamoasi qanday kurashishi haqida post: https://obsidian.md/blog/less-is-safer/

Sber'dan esimda doim npm ci qilib o'rnatardik paketlarni.
Yana bir rule of thumb juda yangi lib/versiyalarni o'rnatmaslik yokida ularga shoshilinch update qilmaslik.

Undan tashqari chatgptga ko'ra: https://chatgpt.com/share/68cdfb82-aef8-800a-9eb0-63ad092c3b25

@qishloqi_uz
OX Security 180+ NPM Packages Hit in Major Supply Chain Attack - OX Security Sandworms in the Supply Chain: The “Shai‑Hulud” npm Credential Theft Overview Attackers slipped malicious code into new releases of a popular open-source color library @ctrl/tinycolor versions 4.1.1 and 4.1.2. The same campaign also trojanized 40+ packages…
  • 👌 3
Open in Telegram All posts from @qishloqi_dev
More from @qishloqi_dev
  1. Sep 19, 20264 hours of sleep = 4 shots of espresso. And I'm back at it on a Saturday
  2. Sep 18, 2026I think this is important: https://keepandroidopen.org/
  3. Sep 18, 2026Android 17 is the first since 3.x to add new APIs without releasing to the AOSP Article, C…
  4. Sep 14, 2026@kulgan_kal
  5. Aug 25, 2026Tmuxda bir nechta windowlarda Claude sessionlarni ishlatsangiz qo'l keladi: https://github…
  6. Aug 18, 2026https://caiustheory.com/git-git-git-git-git/
Threads Profile ViewerView any public Threads profile without an account.Open ThreadLook →Writing with AI? Make it sound human.Metric37 rewrites AI drafts so they read naturally. Free AI detector, 1,500 words free.Try Metric37 →