Skip to content

NPM Incident Addition #148

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
kevkevinpal merged 3 commits into from
Sep 9, 2025
Merged

NPM Incident Addition #148

Changes from all commits
Commits
Show all changes
3 commits
Select commit Hold shift + click to select a range
1f3d5c5
Update 2025-09-11-socratic-seminar-69.md
Dimi8146 Sep 9, 2025
60ac08c
Update 2025-09-11-socratic-seminar-69.md
Dimi8146 Sep 9, 2025
d0f25ef
Update 2025-09-11-socratic-seminar-69.md
Dimi8146 Sep 9, 2025
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
10 changes: 8 additions & 2 deletions _posts/2025-09-11-socratic-seminar-69.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -35,8 +35,7 @@ https://github.com/bitcoinknots/bitcoin/releases/tag/v29.1.knots20250903

https://github.com/TABConf/bitcoinknobs

Bitcoin Knobs is a fork of Bitcoin Knots that takes flexibility a step further. Where others decide what is "safe" or "reasonable," we believe in maximum choice. If that means your node refuses to start, your wallet vanishes into the void, or your peers pretend you don't exist, at least the decision was yours.
ody sane would touch. Some people call that dangerous. We call it feature-complete.
Bitcoin Knobs is a fork of Bitcoin Knots that takes flexibility a step further. Where others decide what is "safe" or "reasonable," we believe in maximum choice. If that means your node refuses to start, your wallet vanishes into the void, or your peers pretend you don't exist, at least the decision was yours. Because freedom means being able to tune every setting, even the ones nobody sane would touch. Some people call that dangerous. We call it feature-complete.

## Nunchuk releases Miniscript + E2EE group wallets

Expand Down Expand Up @@ -88,3 +87,10 @@ Utreexo BIP drafts published by @kcalvinalvinn, co-authored by @tdryja and David
- BIP drafts: https://github.com/bitcoin/bips/pull/1923
- Mail list post: https://groups.google.com/g/bitcoindev/c/W1lxBraKG_E
- Utreexo is a proposed alternative to the UTXO set; more info at https://bitcoinops.org/en/topics/utreexo/

## NPM Malicious Packages Incident

https://x.com/P3b7_/status/1965094840959410230
https://x.com/P3b7_/status/1965336272550899932

$66 stolen in widespread supply chain attack. The developer of a dozen high-impact javascript packages was phished and these packages turned malicious. The NPM security team cleaned up quick and internet-citizen reporting was early and widespread, minimizing impact.