Open Source on Locodigital

Project Gutenberg: how the first ebook appeared in 1971

Sun, 06 Sep 2026 09:00:00 -0300

4 July 1971. Michael Hart, a 24-year-old student at the University of Illinois, has just been given access to a Xerox Sigma V mainframe — one of the most powerful computers available at the time, connected to ARPAnet, the network that decades later would become the internet. Along with the access came a processing-time credit estimated at a hundred million dollars. What does a student do with that?

Hart came back from the grocery store with a printed copy of the American Declaration of Independence — the one that had been tucked into his shopping bag — and spent the night typing the text into the terminal. Then he sent the file out over the network. It was the first ebook in history. It was also file number 1 of Project Gutenberg, the free digital library Hart would maintain for the next forty years.

Miasma: supply chain worm infects 32 Red Hat npm packages

Thu, 04 Jun 2026 10:00:00 -0300

preinstall is one of the simplest hooks in npm: you add a line to package.json and the script runs automatically before any installation. It's useful for validating environments and generating configuration. On 1 June 2026, it emerged that it's equally perfect for stealing the cloud credentials of every developer who runs npm install.

That's what the Miasma worm did across at least 32 releases in the @redhat-cloud-services namespace on npm. Wiz Research identified the compromise on 1 June; the Microsoft Security Blog published a detailed technical analysis on 2 June. The affected packages account for roughly 80,000 downloads a week.

GitHub hacked via a VS Code extension: the TeamPCP case

Mon, 25 May 2026 09:00:00 -0300

18 minutes. That's how long version 18.95.0 of Nx Console was available on the Visual Studio Code Marketplace before being pulled — more than enough time for the TeamPCP group to compromise a GitHub employee and exfiltrate around 3,800 internal repositories belonging to the company. The incident, confirmed by GitHub on 20 May 2026, is one of the most emblematic software supply chain attacks of the year.

What Nx Console is and why it matters to you

Nx Console is a legitimate and very popular VS Code extension, used by developers working with the Nx framework for monorepos. It has hundreds of thousands of active installs. In other words: we're not talking about an obscure extension someone installed carelessly — it's a mainstream, trusted tool with a clean track record.