MAL-2025-11146 Malicious code in @zalastax/nolb-devd (npm)

The package @zalastax/nolb-devd was found to contain malicious code...

Malicious code in @zalastax/nolb-devd (npm)

The package @zalastax/nolb-devd was found to contain malicious code...

MAL-2025-9917 Malicious code in @zalastax/nolb-_devd (npm)

The package @zalastax/nolb-devd was found to contain malicious code...

Analyzing Go Vendoring with BigQuery

GitHub published a snapshot of all the public open-source repositories to BigQuery and Francesc used it to draw some cool statistics about Go projects. I used the same dataset to analyze how the Go ecosystem does vendoring. Disclosure: there's some ego stroking here, as I'm the author of gvt. Try...