Log inSign up
vlt /vōlt/
259 posts
vlt /vōlt/ profile banner
@vltpkg

vlt /vōlt/

@vltpkg
JavaScript package registries & tooling for teams that move fast.
vlt.io
Joined March 2023
257
Following
1,472
Followers
RepliesRepliesRepostsRepostsMediaMedia

Log in or sign up for X

See what’s happening and join the conversation

Continue with phone
or
Log in with username or email
Terms·Privacy·Cookies·Accessibility·Ads Info·© 2026 X Corp.
  • @vltpkg
    vlt /vōlt/
    @vltpkg
    Aug 28
    10 versions of @7nohe/openapi-react-query-codegen was published to npm in an ongoing attack. They contained provenance.
    Security: package is currently publishing malicious code · Issue #218 · 7nohe/openapi-react-query...
    From github.com
  • @vltpkg
    vlt /vōlt/
    @vltpkg
    Aug 28
    You've all solved centering a div with agents. Now what about package management?
    1
  • @vltpkg
    vlt /vōlt/
    @vltpkg
    Aug 26
    vlt 1.0.5 is here 🚀 Faster installs when package.json declares duplicated depedencies: up to 40% smaller. Safer installation and package publishing by default: tar decompression caps & path-traversal hardening enforced. github.com/vltpkg/vltpkg/…
    2
  • @vltpkg
    vlt /vōlt/
    @vltpkg
    Aug 24
    When you need to fix a typo, not an upgrade 🫠
    1
  • @vltpkg
    vlt /vōlt/
    @vltpkg
    Aug 21
    Linux users: watch out for these trojan npm packages masquerading as working calendar and streak utils
    14 Trojanized npm Packages Drop RedC2 4.0 Linux Backdoor With AI-Assisted C2
    From thehackernews.com