MikeTrendsTrends right now
AI: reposAPI

search

NPM

Trends

  1. 1
    New site ranks data visualisation tools dailyโ—Show HN: Dataviz, ranked daily from GitHub, NPM, PyPI and CRAN Article URL: https:// awesomedataviz.com/ Comments URL: hMmastodonBusinessStartups22 h ago

    A new website called Awesome Dataviz has launched, ranking data visualisation libraries and tools on a daily basis using metrics drawn from GitHub, NPM, PyPI and CRAN. The launch was shared on Hacker News as a Show HN post, drawing modest engagement with a small number of points and few comments so far.

  2. 2
    New site ranks data visualisation tools daily across package ecosystemsโ—Show HN: Dataviz, ranked daily from GitHub, NPM, PyPI and CRANYhn118 h ago

    A new website called Awesome Dataviz ranks data visualisation libraries and tools daily, drawing signals from GitHub, NPM, PyPI and CRAN. The project was shared on Hacker News by its creator, Javier Luraschi, inviting feedback from the developer community. The rankings aim to help developers and analysts discover which visualisation libraries are currently gaining traction across the main open-source package ecosystems.

  3. 3
    New theory argues AI does not actually existโ—Its a new dawn โ€“ its a new day! And I am feeling good. https:// youtu.be/xlNpmSN7mRg There is a rather interesting theorMmastodonTechnologyAI24 d ago

    A widely shared post pairs Nina Simone's 'Feeling Good' with a discussion of an underexamined theory in the AI debate: that artificial intelligence does not, logically speaking, actually exist. The post links to a YouTube video laying out the argument, and is drawing attention as public discussion of AI technology remains heated.

  4. 4
    New site ranks data visualisation tools dailyโ—Show HN: Dataviz, ranked daily from GitHub, NPM, PyPI and CRAN https://awesomedataviz.com/ # HackerNews # Tech # DataVizMmastodonTechnology29 h ago

    A new website called Awesome Dataviz has launched, ranking data visualisation libraries and tools each day based on activity across GitHub, NPM, PyPI and CRAN. The launch was shared as a Show HN submission, where it drew modest early attention from the developer community, with commenters weighing in on the usefulness of daily cross-ecosystem rankings for picking charting and plotting libraries.

  5. 5
    101 Malicious npm Packages Found Adding Developers to WhatsApp Groupsโ–ผ101 Malicious npm Packages Add Developers' WhatsApp Accounts to Groups Without Consentโœ‰newsTechnologySoftware4 d ago

    Security researchers have identified 101 malicious npm packages that secretly add developers' WhatsApp accounts to groups without their consent. The packages pose as legitimate tools to trick developers into installing them, after which they abuse WhatsApp's click-to-chat functionality to enroll victims in groups, potentially for scam or spam purposes. Developers are advised to audit dependencies and remove any affected packages.

  6. 6
    85 malicious npm packages found in typosquatting campaignโ–ผ(cloudsek.com) Automated Typosquatting Attack on npm Registry: 85 Malicious Packages Target Popular Libraries via ScopedMmastodonTechnologyCybersecurity15 d ago

    Cybersecurity firm CloudSEK reports an automated typosquatting campaign on the npm registry, with 85 malicious packages published under the @prime0 scope to impersonate popular libraries and trick developers into installing them. The packages target widely used open-source dependencies, raising concerns about supply chain security and the ease of automating fake package publication at scale.

  7. 7
    Critical CVE-2026-102829 flaw reported in simple-gitโ—๐Ÿšจ CVE-2026-102829 โ€” CVSS 9.2 CRITICAL simple-git, an interface for running git commands in any node.js application, enabMmastodonTechnologyCybersecurity05 d ago

    A critical vulnerability, CVE-2026-102829 with a CVSS score of 9.2, has been disclosed in simple-git, the widely used Node.js package for running Git commands from JavaScript. The flaw stems from the argv-parser package, where versions before 2.0.1 omit VISUAL from the GitEnvKeys in parseEnv, affecting how prepareEnv handles the environment. Developers are being urged to check their dependencies and update.

  8. 8
    DirtyBlanket Linux Worm Spreads Through Malicious npm Packagesโ—(safedep.io) DirtyBlanket: Self-Spreading Linux Worm Distributed via Malicious npm Packages Targeting Developers In brieMmastodonTechnologyCybersecurity15 d ago

    Security researchers at SafeDep report a self-spreading Linux worm, dubbed DirtyBlanket, distributed through nine malicious npm packages impersonating popular libraries such as Express and React. Once installed, the malware targets developers' Linux machines and propagates further, making supply-chain attacks on the JavaScript ecosystem a renewed concern for developers reviewing dependencies.

Repos