
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
@pipedream/hacker_news
Advanced tools

Google Alerts let you "monitor the web for interesting new content" and many of our users like to do the same for Hacker News.
The Hacker News components turn the Hacker News API into an event stream based on your given keyword(s).
Components can emit events, which can be retrieved programmatically via CLI, API or SSE. They can also trigger Pipedream workflows on every event. For example, you can process items from an RSS feed and access the items via REST API, or trigger code to run on every new item using the SSE interface or a workflow.
or:
Install the Pipedream CLI, then deploy the Hacker News "new stories by keyword" component from the registry:
pd deploy hacker_news-new-stories-by-keyword
Or, deploy the "new comments by keyword" component from the registry:
pd deploy hacker_news-new-stories-by-keyword
Submit your keyword and deploy your component.
You have turned the Hacker News API into a real time event stream!
Components are similar to serverless functions, like those offered by AWS Lambda. You don't have to manage the server that runs the code — components are hosted on Pipedream infrastructure — and they run on specific events like HTTP requests and timers.
But we believe components are simpler to learn, write, and maintain for many use cases. They let you focus more on the code, and less on the configuration of the function and its associated services:
This is also an early release. The component API will improve over time. Right now, we're looking for any and all feedback. Tell us what you're building, what works and what doesn't, and anything you think would improve the product.
Pipedream is currently free, subject to the limits noted below. Paid tiers for higher volumes are coming soon.
If you exceed any of these limits, please reach out.
Components are subject to the limits of the Pipedream platform.
Any bugs or feature requests for specific components can be raised in this repo as new Github issues or pull requests.
Pipedream also operates a roadmap to solicit feature requests for the Pipedream platform at large (the pipedream.com UI, workflows, the CLI, etc).
You can always reach out to our team - we're happy to discuss feedback or help fix a bug.
FAQs
Pipedream Hacker_news Components
The npm package @pipedream/hacker_news receives a total of 8 weekly downloads. As such, @pipedream/hacker_news popularity was classified as not popular.
We found that @pipedream/hacker_news demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 6 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.