The best Hacker News stories from All from the past day

Latest posts:

YouTube addresses lower view counts which seem to be caused by ad blockers

<a href="https://github.com/easylist/easylist/issues/22375" rel="nofollow">https://github.com/easylist/easylist/issues/22375</a>

YouTube addresses lower view counts which seem to be caused by ad blockers

<a href="https://github.com/easylist/easylist/issues/22375" rel="nofollow">https://github.com/easylist/easylist/issues/22375</a>

WASM 3.0 Completed

WASM 3.0 Completed

Apple Photos app corrupts images

Apple Photos app corrupts images

Things you can do with a Software Defined Radio (2024)

Things you can do with a Software Defined Radio (2024)

I feel Apple has lost its alignment with me and other long-time customers

Linux phones are more important now than ever

Denmark close to wiping out cancer-causing HPV strains after vaccine roll-out

Denmark close to wiping out cancer-causing HPV strains after vaccine roll-out

Man jailed for parole violations after refusing to decrypt his Tor node

Waymo has received our pilot permit allowing for commercial operations at SFO

Waymo has received our pilot permit allowing for commercial operations at SFO

Shai-Hulud malware attack: Tinycolor and over 40 NPM packages compromised

A lot of blogs on this are AI generated and such as this is developing, so just linking to a bunch of resources out there:<p>Socket:<p>- Sep 15 (First post on breach): <a href="https://socket.dev/blog/tinycolor-supply-chain-attack-affects-40-packages" rel="nofollow">https://socket.dev/blog/tinycolor-supply-chain-attack-affect...</a><p>- Sep 16: <a href="https://socket.dev/blog/ongoing-supply-chain-attack-targets-crowdstrike-npm-packages" rel="nofollow">https://socket.dev/blog/ongoing-supply-chain-attack-targets-...</a><p>StepSecurity – <a href="https://www.stepsecurity.io/blog/ctrl-tinycolor-and-40-npm-packages-compromised" rel="nofollow">https://www.stepsecurity.io/blog/ctrl-tinycolor-and-40-npm-p...</a><p>Aikido - <a href="https://www.aikido.dev/blog/s1ngularity-nx-attackers-strike-again" rel="nofollow">https://www.aikido.dev/blog/s1ngularity-nx-attackers-strike-...</a><p>Ox - <a href="https://www.ox.security/blog/npm-2-0-hack-40-npm-packages-hit-in-major-supply-chain-attack/" rel="nofollow">https://www.ox.security/blog/npm-2-0-hack-40-npm-packages-hi...</a><p>Safety - <a href="https://www.getsafety.com/blog-posts/shai-hulud-npm-attack" rel="nofollow">https://www.getsafety.com/blog-posts/shai-hulud-npm-attack</a><p>Phoenix - <a href="https://phoenix.security/npm-tinycolor-compromise/" rel="nofollow">https://phoenix.security/npm-tinycolor-compromise/</a><p>Semgrep - <a href="https://semgrep.dev/blog/2025/security-advisory-npm-packages-using-secret-scanning-tools-to-steal-credentials/" rel="nofollow">https://semgrep.dev/blog/2025/security-advisory-npm-packages...</a>

Shai-Hulud malware attack: Tinycolor and over 40 NPM packages compromised

A lot of blogs on this are AI generated and such as this is developing, so just linking to a bunch of resources out there:<p>Socket:<p>- Sep 15 (First post on breach): <a href="https://socket.dev/blog/tinycolor-supply-chain-attack-affects-40-packages" rel="nofollow">https://socket.dev/blog/tinycolor-supply-chain-attack-affect...</a><p>- Sep 16: <a href="https://socket.dev/blog/ongoing-supply-chain-attack-targets-crowdstrike-npm-packages" rel="nofollow">https://socket.dev/blog/ongoing-supply-chain-attack-targets-...</a><p>StepSecurity – <a href="https://www.stepsecurity.io/blog/ctrl-tinycolor-and-40-npm-packages-compromised" rel="nofollow">https://www.stepsecurity.io/blog/ctrl-tinycolor-and-40-npm-p...</a><p>Aikido - <a href="https://www.aikido.dev/blog/s1ngularity-nx-attackers-strike-again" rel="nofollow">https://www.aikido.dev/blog/s1ngularity-nx-attackers-strike-...</a><p>Ox - <a href="https://www.ox.security/blog/npm-2-0-hack-40-npm-packages-hit-in-major-supply-chain-attack/" rel="nofollow">https://www.ox.security/blog/npm-2-0-hack-40-npm-packages-hi...</a><p>Safety - <a href="https://www.getsafety.com/blog-posts/shai-hulud-npm-attack" rel="nofollow">https://www.getsafety.com/blog-posts/shai-hulud-npm-attack</a><p>Phoenix - <a href="https://phoenix.security/npm-tinycolor-compromise/" rel="nofollow">https://phoenix.security/npm-tinycolor-compromise/</a><p>Semgrep - <a href="https://semgrep.dev/blog/2025/security-advisory-npm-packages-using-secret-scanning-tools-to-steal-credentials/" rel="nofollow">https://semgrep.dev/blog/2025/security-advisory-npm-packages...</a>

Hosting a website on a disposable vape

Denmark's Justice Minister calls encrypted messaging a false civil liberty

How big a solar battery do I need to store all my home's electricity?