That’s so fetch

February 3, 2022 By Mark Otto 0

‘How I Reversed a Node.js Malware and Found The Author’ — Someone was sending messages to people on the author’s Discord server encouraging them to download and run a nefarious .exe file.. which turned out to be a packaged up Node.js app. Here’s the rest of the story.

The Devops Guy

State of Node.js Community Survey — What are your favorite packages? Where do you learn more about Node.js? Take our survey, and we’ll send you swag or make a donation to Node.js open-source projects on your behalf.

AppSignal

Top 100 npm Package Maintainers Now Must Use 2FA — We mentioned npm’s forthcoming enhanced security procedures a while ago, and now they’re beginning to roll out in a phased manner. The maintainers of the top 100 npm packages judged by number of dependent projects now have to use two-factor auth, but all package maintainers need to be aware of the forthcoming changes outlined here.

Myles Borins (GitHub)

Find Tech Jobs with Hired — Create a profile on Hired to connect with hiring managers at growing startups and Fortune 500 companies. It’s free for job-seekers.
Hired

🛠 Code & Tools

Electron 17 Released — The popular cross-platform desktop app framework gets key dependency bumps with Chromium 98 support, Node 16.13.0, and V8 9.8.

Michaela Laurencin and Keeley Hammond