Navigate Select ESC Close

A single PR just hijacked the NPM registry...

2026-05-14 Science & Technology
210.1k
9.3k
621
Fireship
Fireship
4.2m subscribers

Unlock all features

FREE: Get instant access to 10 AI summaries, chats, or transcripts per day.

Description

Try Seer Agent for free - https://sentry.io/fireship. It uses all of Sentry's context on your app to investigate production issues for you. Earlier this week Tanstack was poisoned with a sophisticated supply chain attack . In this video we break down how it happened and how you can protect yourself in the future. #coding #programming Want more Fireship? 🗞️ Newsletter: https://bytes.dev 🧠 Courses: https://fireship.dev

Top Comments (10)

@markshall94 2026-05-14

These days, updating to the latest versions of things is more of a security threat than waiting lol

2.7k 44 replies
@ItsDoms 2026-05-14

2016: make sure to always update your software to prevent getting hacked 2026: make sure to never update your software to prevent getting hacked

1.2k 16 replies
@ExtremelyAnonymous-x7h 2026-05-14

NPM stands for Neatly Packaged Malware

1.9k 11 replies
@PointerSoftwareSystems 2026-05-14

closing my laptop, throwing it in the ocean, and becoming a carpenter. peace out guys.

1.6k 33 replies
@JulianTheApostateEatingDoritos 2026-05-14

News is either a new AI model or a hack nowadays

910 16 replies
@ymellow. 2026-05-14

A second worm has hit the registry

701 4 replies
@AllHailNannerpuss 2026-05-14

Why is it, when something happens, it is always you three? -NPM -NPM -NPM

704 11 replies
@akarien1395 2026-05-14

"No way to prevent this", says only industry where this regularly happens

481 18 replies
@TheCalculator9000 2026-05-14

Modern computing; no one truly knows what is running on their machine.

214 5 replies
@Lemonator_32 2026-05-14

Haha, I love automatically downloading arbitrary code from the Internet and running it on my critical infrastructure.

250 5 replies

Unlock the Data Inside
Turn Videos into Knowledge

  • Get FREE 10/day: transcripts, summaries, chats
  • Chat with videos, export text & PDF
  • $1 free API credit for RAG, chatbots & research

Free forever plan • All features unlocked

App screenshot