🚨 A single phishing email let attackers hijack maintainer accounts and push malware into widely used npm packages like chalk, debug and ansi‑styles—affecting libraries with  2.6 B weekly downloads. Details: thehackernews.com/2025/09/20-pop…

🕵️‍♀️ The injected code isn’t just malicious—it hooks browser APIs (window.ethereum, fetch, XHR) to hijack crypto transactions. The attacker gained access via a convincing 2FA reset email, showing how fragile our dependencies can be.

🔍 Even with strong hygiene, the scale and complexity of modern dependency chains make supply‑chain attacks hard to detect. A single tainted package ripples through countless apps—proof that transitive dependencies are a hidden hazard.

Sora 2 invite code 👇 ...

Sora 2 invite code available in the Smart Connections Community private chat

Welcome to the future brought to you by Sam Altman 🤯

Sam Altman Smart Connections uses a local model by default, so your notes stay local

Smart Connections wait, what?? oh lolll this one about smart connections was the first thing that popped up and for a second i thought it was a crazy coincidence #smartconnectionsynchronicity. “wfh”? nice one

Sam Altman Obsidian Smart Connections

Special Report 🌎 Smart Connections Obsidian plugin, Your Personal Researcher, in the spirit of local-first & minimal dependencies

The Obsidian Smart Connections plugin moves you from chaos to connected

When the atmosphere of hyped demos goes stale, Smart Environment will be like a breath of fresh air 🌬️🍃

The vibes