{
  "id": 17500252,
  "title": "I had never done open source. Then I got a 12-hour problem about catching malicious npm packages.",
  "url": "https://urgent.news/2026/11/01/i-had-never-done-open-source-then-i-got-a-12-hour-problem-about",
  "topic": "tech",
  "section": "Tech",
  "published": "2026-11-01T00:19:23.000Z",
  "source": {
    "name": "Dev.to",
    "slug": "dev-to",
    "url": "https://dev.to/abhi_1234/i-had-never-done-open-source-then-i-got-a-12-hour-problem-about-catching-malicious-npm-packages-m"
  },
  "original_language": "en",
  "account": "It was 2 AM, and the author, still at their university, was staring at their laptop that was overheating while reviewing CI and CD pipelines. The experience had started with Hacktoberfest, which had been held on their campus by MLH, NST, and WeMakeDevs. The event began at 4 PM on the 31st of October, and the hackathon officially started at 6:30 PM. The author had never done open source before and was nervous about contributing real projects. The team was tasked with identifying suspicious files in npm packages, a problem they had never encountered before. The rules for this hackathon were stricter than the author was used to, but they gradually learned that this was the way real open source projects operated.\n\nThe author's team was led by Animesh, and they worked diligently through the night, despite encountering errors and setbacks. The author made several incorrect pushes to the main branch, which caused confusion among their team members. However, Rishabh was able to fix the issues, and the team managed to complete their project. The author learned that taking part in such hackathons was beneficial, as it provided opportunities to learn and grow. They also appreciated the supportive community, which included GSoC contributors, mentors, and others from various organizations. The author realized that open source was not just about getting perks or money, but about helping others and building a community.\n\nThe author found that the open source community was made up of helpful individuals who were willing to assist students, even at the cost of their own time. This realization made the author understand that open source could be a viable career option. Previously, the author had only considered open source as a means to participate in Google Summer of Code, but now they saw that it could open up various opportunities, such as working on projects at LFX, Summer of Bitcoin, MLH, Google sessions on docs, and outreach programs. The author also noted that the Hacktoberfest organizers had shifted their focus to solving real problems rather than merely counting contributions.\n\nAs a beginner, the author acknowledged that they were not prepared for the experience, but they encouraged others to join the next Hacktoberfest event and start contributing. They highlighted the importance of seeking help early and making small, manageable pull requests. The author emphasized that it is okay to be stuck at times, as everyone experiences this challenge. By participating in open source, the author felt more confident in their abilities and understood that it was never too late to begin their open source journey.",
  "summary": "ok so it's 2 AM, I'm sitting in a classroom at my own university, my laptop is getting hot, and I'm looking at CI and CD pipe lines. And I'm thinking, why did I even sign up for this. Let me start from the beginning. Hacktoberfest came to my college I study at Rishihood University, Sonipat. This time Hacktoberfest Hack Day was happening in our own campus, organised by MLH, NST and WeMakeDevs. Lot…",
  "key_points": [
    "Author had no prior experience with open source",
    "Team worked through 12-hour problem to catch malicious npm packages",
    "Open source community provided support and opportunities"
  ],
  "editors_take": "Shifting hackathon focus toward solving real-world security problems transforms these events from simple contribution counters into essential training grounds for students seeking professional careers in open source.",
  "illustration": null,
  "coverage": {
    "outlets": 1,
    "also_reported_by": []
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}