Node Package Manager (NPM)

November 2025

November 2025


Vol. 8, Iss. 48
Robin’s Newsletter #389
Vol. 8, Iss. 48

Shai-Hulud NPM worm back. Gainsight CEO downplays breach. Three London councils struggle with 'cyber issue'. Poetic AI jailbreaks.


Vol. 8, Iss. 44
Robin’s Newsletter #385
Vol. 8, Iss. 44

The human cost of MOD's Afghan data breach. Surprise deregulation of US telcos. New dependency bypass technique on npm developers.

November 2024

November 2024


Vol. 7, Iss. 45
Robin’s Newsletter #334
Vol. 7, Iss. 45

Okta auth bypass for long usernames. Copyright infringement notices used to drop infostealers. Schneider Electric attacker wants payment in baguettes.