Practical notes on web development and security — the kind of thing we'd want to read before hiring someone for either.
Poisoned Python and npm packages are stealing keys from developer machines. Three recent incidents, what they cost, and how to defend against them.









Our rule for this page
Same policy as the Work page: an article goes live when it's actually finished and fact-checked, not filled with placeholder copy pretending to be a real post.
Ask the AI Advisor directly, or suggest a topic and we'll consider it for a future article.