HNHacker News
TopNewBestAskShowJobs

feross

48,015 karma · joined September 1, 2009

Founder & CEO, Socket <https://socket.dev> – Socket makes a developer-first security platform that prevents vulnerable and malicious open source dependencies from infiltrating your software supply chain.

Stanford visiting lecturer, CS 253 Web Security <https://cs253.stanford.edu> – Principles of web security, attacks and countermeasures, and more...

Open source maintainer – 100+ open source packages on npm, including WebTorrent <https://webtorrent.io>, StandardJS <https://standardjs.com>, BitMidi <https://bitmidi.com>, simple-peer <https://github.com/feross/simple-peer>, and more <https://socket.dev/npm/user/feross>.

You can reach me at {my username}@feross.org, or find out more on my website: https://feross.org/resume

[ my public key: https://keybase.io/feross; my proof: https://keybase.io/feross/sigs/gO6pVIJ1DXdy9Y21yil6nlyk_by5BE_GaaWOOQJ5PvQ ]

submissionscomments

Malicious Chrome VPN Extensions Discovered That Do Traffic Redirection

socket.dev·2 pts·feross·
0

PyPI Fixes High-Severity Access Control Issues Found in Security Audit

socket.dev·1 pts·feross·
0

Axios Maintainer Confirms Social Engineering Attack Behind NPM Compromise

socket.dev·5 pts·feross·
0

The Hidden Blast Radius of the Axios Compromise

socket.dev·6 pts·feross·
0

Trivy Supply Chain Attack Expands to Compromised Docker Images

socket.dev·5 pts·feross·
3

Malicious NPM Packages Use Pastebin Steganography to Deploy Credential Stealer

socket.dev·2 pts·feross·
0

Malicious Go "Crypto" Module Steals Passwords and Deploys Rekoobe Backdoor

socket.dev·3 pts·feross·
0

Shai-Hulud-Style NPM Worm Hijacks CI Workflows and Poisons AI Toolchains

socket.dev·8 pts·feross·
0

First Brands Did Some Round Trips

bloomberg.com·1 pts·feross·
0

15 Years of Blogging

nolanlawson.com·2 pts·feross·
1

When will CSS Grid Lanes arrive?

webkit.org·50 pts·feross·
27

2026.05: The Chip Fly in the AI Ointment

stratechery.com·1 pts·feross·
0

Put a Pin in It

signal.org·1 pts·feross·
0

Building a browser API in one shot

nolanlawson.com·3 pts·feross·
0

Kimwolf Botnet Lurking in Corporate, Govt. Networks

krebsonsecurity.com·19 pts·feross·
0

Michael Ovitz: The Business of Relationships

fs.blog·1 pts·feross·
0

Best of Moltbook

astralcodexten.com·92 pts·feross·
37

GlassWorm Loader Hits Open VSX via Developer Account Compromise

socket.dev·3 pts·feross·
0

Ads in ChatGPT, Why OpenAI Needs Ads, the Long Road to Instagram

stratechery.com·1 pts·feross·
0

Turbopack: Building faster by building less

nextjs.org·47 pts·feross·
23

2026.03: Technology Doings

stratechery.com·1 pts·feross·
0

Temporal API Ships in Chrome 144, Marking a Major Shift for JavaScript Date

socket.dev·3 pts·feross·
1

Stablecoin Narrow Banking

bloomberg.com·1 pts·feross·
0

An Interview with United CEO Scott Kirby About Tech Transformation

stratechery.com·1 pts·feross·
1

New Safari developer tools provide insight into CSS Grid Lanes

webkit.org·123 pts·feross·
74

Meta Compute, the Meta-OpenAI Battle, the Reality Labs Sacrifice

stratechery.com·2 pts·feross·
0

SOTA on Bay Area House Party

astralcodexten.com·9 pts·feross·
1

Apple and Gemini, Foundation vs. Aggregation, Universal Commerce Protocol

stratechery.com·2 pts·feross·
0

Paramount wants Warner to show its work

bloomberg.com·2 pts·feross·
0

Apple: You (Still) Don't Understand the Vision Pro

stratechery.com·3 pts·feross·
1
Page 1 of 34Next →