Posts from 16 March 2025

Brian Fox discusses findings from a recent Sonatype report about the growing challenge of malicious packages in open source repositories. At the time of recording there are now over 820,000 malware packages in public repositories. Brian explains why certain ecosystems are more vulnerable than others and how behavioral detection methods can identify suspicious packages, and the challenge in solving this problem. The blog post for this episode can be found at

🛡️ Security releasesGo 1.24.1 & 1.23.7 releasedgolang.org/x/net v0.36.0 releasedgopls v0.18.0 released🇫🇮 Helsinki meetup, March 18, still looking for speakersTypeScript rewrite in Go🌩️ Lightning RoundAsdf Has Been Re-Written in GoGo clients dominate internet API trafficWhy was nvm for Windows...