
Research
/Security News
Toptalβs GitHub Organization Hijacked: 10 Malicious Packages Published
Threat actors hijacked Toptalβs GitHub org, publishing npm packages with malicious payloads that steal tokens and attempt to wipe victim systems.
[](https://blitzjs.com)
Run npm install -g blitz
or yarn global add blitz
You can alternatively use npx
blitz new myAppName
cd myAppName
blitz dev
The Blitz community is warm, safe, diverse, inclusive, and fun! LGBTQ+, women, and minorities are especially welcome. Please read our Code of Conduct.
Join our Discord Community where we help each other build Blitz apps. It's also where we collaborate on building Blitz itself.
For questions and longer form discussions, post in our forum.
There's still a lot of work to do, so you are especially invited to join us in building Blitz! A good place to start is The Contributing Guide.
Your financial contributions help ensure Blitz continues to be developed and maintained! We have monthly sponsorship options starting at $5/month.
π View options and contribute at GitHub Sponsors, PayPal, or Open Collective
![]() |
|
![]() |
![]() |
|
![]() |
![]() |
|
![]() |
![]() |
![]() |
Brandon Bayer Creator | Dillon Raphael |
Siddharth Suresh |
Code ownership, pull request approvals and merging, etc (see Maintainers L2)
Simon Knott SuperJSON | JH.Lee SuperJSON |
Issue triage, pull request triage, community encouragement and moderation, etc (see Maintainers L1)
Jeremy Liberman |
Thanks to these wonderful people (emoji key):
This project follows the all-contributors specification. Contributions of any kind welcome!
FAQs
[](https://blitzjs.com)
The npm package blitz receives a total of 3,818 weekly downloads. As such, blitz popularity was classified as popular.
We found that blitz demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago.Β It has 4 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
/Security News
Threat actors hijacked Toptalβs GitHub org, publishing npm packages with malicious payloads that steal tokens and attempt to wipe victim systems.
Research
/Security News
Socket researchers investigate 4 malicious npm and PyPI packages with 56,000+ downloads that install surveillance malware.
Security News
The ongoing npm phishing campaign escalates as attackers hijack the popular 'is' package, embedding malware in multiple versions.