The Hacker News

36 Malicious npm Packages Exploited Redis, PostgreSQL to Deploy Persistent Implants

Strapi plugins exploit Redis and PostgreSQL via postinstall scripts, enabling persistent access and data theft.
SecurityWeek

From Trivy to Broad OSS Compromise: TeamPCP Hits Docker Hub, VS Code, PyPI

After hacking Trivy, TeamPCP moved to compromise repositories across NPM, Docker Hub, VS Code, and PyPI, stealing over 300GB ...
GitHub

charmingYouYou/openharmony-docs-rag

这套系统只推荐通过 Docker Compose 部署。Web、API、Qdrant 和运行时配置已经围绕容器交付方式收敛完成。
GitHub

DevilSyfer/legal-rag-system-

A production-ready Retrieval Augmented Generation (RAG) system built from scratch for legal document intelligence. Upload any PDF, ask questions, and get grounded answers with source citations — ...