
Research
Supply Chain Attack on Axios Pulls Malicious Dependency from npm
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.
fucking-singletons
Advanced tools
A framework of patterns for avoiding antipatterns in Unity

Inspired heavily (entirely) by Ryan's talk at Unite 2017, this is a framework that provides some tools that make writing better game code easier.
This framework depends heavily on ScriptableObjects to make things work. As such, you should have an understanding of what those are! The best way to get that understanding is likely from this video.
Current version is
0.1.0
These are the "tools" that the framework provides :tada:
Abstract class
A SOObject represents some primitive type as a scriptable object. It's effectively a data wrapper.
A primitive wrapper, wrapping a boolean value.
A primitive wrapper, wrapping a float value.
A primitive wrapper, wrapping an int value.
A primitive wrapper, wrapping a string value.
Abstract class
A SOReference provides an abstraction layer for your systems - enabling them to work on data represented as SOObjects, or as constant values.
Abstraction representing either a SOBool or a boolean constant.
Abstraction representing either a SOFloat or a float constant.
Abstraction representing either a SOInt or an int constant.
Abstraction representing either a SOString or a string constant.
A SOEvent represents an event that can be raised, and a collection of listeners that will be notified in the event that it is, in fact, raised.
Raises the event (optionally with parameters)
Registers a listener
Unregisters a listener
A SOEventListener represents the response to a SOEvent - namely the action(s) to take when it is raised
A SOSet represents a collection of items.
Returns the child items
Returns the count of the child items
Adds a child item
Removes a child item
A set wrapper for storing GameObjects
A runtime helper for adding GameObjects to a GameObjectSOSet - this enables runtime population of a set
Contains information about the framework (like version, editor tooling information, etc)
FAQs
A framework of patterns for avoiding antipatterns in Unity
We found that fucking-singletons demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.

Research
Malicious versions of the Telnyx Python SDK on PyPI delivered credential-stealing malware via a multi-stage supply chain attack.

Security News
TeamPCP is partnering with ransomware group Vect to turn open source supply chain attacks on tools like Trivy and LiteLLM into large-scale ransomware operations.