HN Explorer

Sudhanshu2310

↗ HN profile [ 26.8 ms ] full profile
Karma
0
Created
()
Submissions
0
  1. Megalodon: Mass GitHub Repo Backdooring via CI Workflows (safedep.io)
    17 points 1
  2. 1 points 0
  3. 1 points 0
  4. 1 points 0
  5. Someone published a trojan inside a clone of react-refresh

    We just found and reported a malicious npm package impersonating react-refresh - 42 million weekly downloads, used in virtually every React build toolchain. One file modified. Rest of the package works normally. On…

    1 points 0
  6. The software supply chain has a new problem: AI agents (safedep.io)
    4 points 1
  7. Malicious NPM package pino-SDK-v2 exfiltrates .env secrets to Discord

    We just analyzed a fresh supply chain attack on npm that's pretty well-executed. Package: pino-sdk-v2 Target: Impersonates pino (one of the most popular Node.js loggers, ~20M weekly downloads) Reported to OSV too-…

    2 points 2