HackerNews Summary (2023-05-05 06AM)

Source: Phylum Discovers Mischievous NPM Publications

Summary
Two identical packages on NPM called lodash-simple and lodash-tailwind were discovered to contain mischievous code that is designed to slightly modify behavior of a developer’s code.

Fact

📦 The obfuscated packages were published on NPM on April 24, 2023.

🧙 The code in the packages is mischievous in nature and modifies the behavior of developer’s code.

👨‍💼 The packages were published by an author called craftlk.

---

Source: Fragmentarium

Summary
An exhibition catalogue of medieval manuscript fragments from Cluj, Romania (2022) can now be downloaded for free. Also, a book discussing manuscripts and incunabula from medieval dioceses of Cenad, Oradea, and Transylvania is available to order from the publisher. The books inaugurate a series edited by the Centre for the History of the Book at the University of Cluj.

Fact

📜 The catalogue of medieval manuscript fragments from Cluj can be downloaded for free.

📚 A book discussing medieval manuscripts and incunabula from Transylvanian dioceses is available for order from the publisher.

📖 The book inaugurates a series edited by the Centre for the History of the Book (CODEX) at the University of Cluj.

📚 The second volume in the series is also available for order from the publisher. It focuses on the book culture of the Transylvanian Saxons.

---

Source: U.S. Hits Z-Library With New Domain Name Seizures * TorrentFreak

Summary
Z-Library, the platform that offers free access to millions of books, has experienced a new round of domain name seizures. Despite the shadow library’s main login panel being taken down, the site remains operational on the dark web and users can access it through its TOR and I2P versions.

Fact

📚 Z-Library provides access to millions of pirated books and articles for free.

🔎 The U.S. government is cracking down on the shadow library and has seized several of its domain names, including b-ok.lat, booksc.me, and b-ok.as.

💻 Despite the domain seizures, Z-Library remains operational on the dark web and through TOR and I2P versions.

🚨 Two alleged Z-Library operators were arrested in Argentina in November 2020 as part of a criminal investigation.

---