Self-propagating npm worm steals tokens via postinstall hooks, impacting six packages and expanding supply chain attacks.

Note: uvx pywho is not recommended — it runs inside uv's ephemeral sandbox, so the output reflects that temporary environment instead of your actual project. Always install pywho into the environment ...

/** Open a file on the given file descriptor. * This is disruptive if there is already something open on that descriptor. * Caller beware. * \param ctx An initialized, but unopened socket context. * ...