Reddit Programming
199 subscribers
1.22K photos
126K links
I will send you newest post from subreddit /r/programming
Download Telegram
axios 1.14.1 and 0.30.4 on npm are compromised - dependency injection via stolen maintainer account
https://www.reddit.com/r/programming/comments/1s8ct9i/axios_1141_and_0304_on_npm_are_compromised/

<!-- SC_OFF -->Two versions of axios were published today through what appears to be a compromised maintainer account. No GitHub tag exists for either version. SLSA provenance attestations present in 1.14.0 are completely absent. Publisher email switched from the CI-linked address to a Proton Mail account( classic account takeover signal). <!-- SC_ON --> submitted by /u/BattleRemote3157 (https://www.reddit.com/user/BattleRemote3157)
[link] (https://safedep.io/axios-npm-supply-chain-compromise/) [comments] (https://www.reddit.com/r/programming/comments/1s8ct9i/axios_1141_and_0304_on_npm_are_compromised/)
Domain Separation Belongs in Your IDL
https://www.reddit.com/r/programming/comments/1s8ndig/domain_separation_belongs_in_your_idl/

<!-- SC_OFF -->Even in 2026, I don't think we're going about serializing and signing data structures the right way. I don't think protobufs are the answer. A better solution is random domain separators, specified directly in the IDL. <!-- SC_ON --> submitted by /u/maxtaco (https://www.reddit.com/user/maxtaco)
[link] (https://blog.foks.pub/posts/domain-separation-in-idl/) [comments] (https://www.reddit.com/r/programming/comments/1s8ndig/domain_separation_belongs_in_your_idl/)
What's cch? Reverse Engineering Claude Code's Request Signing
https://www.reddit.com/r/programming/comments/1s98wuw/whats_cch_reverse_engineering_claude_codes/

<!-- SC_OFF -->I originally reverse engineered this when Fast Mode was first introduced and contacted Anthropic in order to get approval for responsible disclosure but I never heard back. Now that there's a lot of buzz around the CCH header, I wanted to share what I found. <!-- SC_ON --> submitted by /u/tcdent (https://www.reddit.com/user/tcdent)
[link] (https://a10k.co/b/reverse-engineering-claude-code-cch.html) [comments] (https://www.reddit.com/r/programming/comments/1s98wuw/whats_cch_reverse_engineering_claude_codes/)