今日已更新 276 条资讯 | 累计 27080 条内容
关于我们

开发者

编程技术、框架工具、最佳实践

7577
篇文章

共 7577 篇 · 第 361/379 页

Reddit r/programming

I Stopped Fighting My Tools and Built a Game Engine in D

Alexandros Kapretsos describes how he used some D programming language features in his 2D game engine. He covers his approach to memory management, how he employs metaprogramming, writing scripts with D, and more. submitted by /u/aldacron [link] [留言]

/u/aldacron 2026-05-29 17:47 👁 6 查看原文 →
Reddit r/programming

Someone hid a full RAT inside a fake npm package and exfiltrated victim data to HuggingFace

A malicious npm package name js-logger-pack , went through 29 versions on the registry which was looking innocuous logger and ending as a binary dropper. The payload it dropped was 81 MB of binary called MicrosoftSystem64 which is a full cross-platform RAT packaged as a Node.js Single Executable Application, so it shows up as a native binary to endpoint tools rather than a node process. And the clever bit was instead of sending the stolen data directly to a C2 server, it uploads everything to private HuggingFace datasets using an embedded API token. So all exfiltration traffic appears as normal HTTPS requests to a legitimate ML platform. If you have any of those in your install history then rotate everything like credentials, SSH keys, API tokens, crypto seed phrases. All packages list and full technical breakdown is in blog. submitted by /u/BattleRemote3157 [link] [留言]

/u/BattleRemote3157 2026-05-29 17:34 👁 5 查看原文 →