Record · corpus.blog/posts/01a0f17f-db22-73d9-8148-b8032b15de3d

The cost of dependencies

lazutkin.com · published 29 September 2026

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at lazutkin.com Wayback capture

0blogs citing

First cited: —
Most recent: —
Rank this month: not ranked
Links from this post: 23
Words captured: 2,921

Cited by

No blog we hold has cited this post yet.

Links from this post

Link

Host

Back-of-the-envelope estimates Read at the source ↗

lazutkin.com

A post-mortem of the malicious event-stream backdoor Read at the source ↗

snyk.io

https://securitylabs.datadoghq.com/articles/xz-backdoor-cve-2024-3094/

securitylabs.datadoghq.com

https://www.wiz.io/blog/widespread-npm-supply-chain-attack-breaking-down-impact-scope-across-debug-chalk

wiz.io

https://www.paloaltonetworks.com/blog/cloud-security/npm-supply-chain-attack/

paloaltonetworks.com

"Shai-Hulud" Worm Compromises npm Ecosystem in Supply Chain Attack (Updated November 26) Read at the source ↗

unit42.paloaltonetworks.com

https://securitylabs.datadoghq.com/articles/shai-hulud-2.0-npm-worm/

securitylabs.datadoghq.com

https://www.microsoft.com/en-us/security/blog/2026/04/01/mitigating-the-axios-npm-supply-chain-compromise/

microsoft.com

TanStack Npm Packages Compromised Inside The Mini Shai Hulud Supply Chain Attack Read at the source ↗

snyk.io

Mini Shai-Hulud Hits AntV: 300+ Malicious npm Packages Published via Compromised Maintainer Account Read at the source ↗

snyk.io

https://github.com/uhop/node-re2

github.com

https://github.com/laurikari/tre

github.com

https://github.com/egoist/rollup-plugin-postcss

github.com

Where do old programmers go? Read at the source ↗

lazutkin.com

https://docs.npmjs.com/cli/v11/using-npm/config

docs.npmjs.com

https://pnpm.io/settings

pnpm.io

https://docs.github.com/en/code-security/dependabot/working-with-dependabot/dependabot-options-reference

docs.github.com

https://www.djangoproject.com/

djangoproject.com

Generalization as discipline Read at the source ↗

lazutkin.com

https://github.com/tj/react-enroute

github.com

https://web.archive.org/web/2012/http://blog.nodejitsu.com/top-node-module-creators

web.archive.org

https://github.com/TanStack/table

github.com

"Premature" optimization Read at the source ↗

lazutkin.com