HN Explorer

abhisek

↗ HN profile [ 72.5 ms ] full profile
Karma
0
Created
()
Submissions
0
  1. Malicious Rust Crate Arrayref Runs a Build-Time Payload (safedep.io)
    1 points 354
  2. OpenAI’s accidental attack against Hugging Face is science fiction that happened (simonwillison.net)

    OpenAI and Hugging Face address security incident during model evaluation - https://news.ycombinator.com/item?id=48997548 - July 2026 (1121 comments)

    587 points 116
  3. Show HN: PMG, open source package firewall (github.com)

    Hi HN I am the founder of SafeDep. We have been detecting malicious packages for a while. Coming from DevSecOps background, I always considered malicious package detection & protection to be a build stage problem. But I…

    4 points 2
  4. Jscrambler 8.14.0 Compromised with Credential Stealer (safedep.io)
    3 points 0
  5. Claude Mythos and Cybersecurity (schneier.com)
    4 points 0
  6. Coruna: The Mysterious Journey of a Powerful iOS Exploit Kit (cloud.google.com)
    1 points 0
  7. 1 points 0
  8. 1 points 0
  9. Step by Step Analysis of Malicious NPM Package (safedep.io)
    1 points 0
  10. OpenClaw bot calls out maintainer when its PR got rejected (crabby-rathbun.github.io)
    1 points 0
  11. Show HN: Gryph – Audit Trail for AI Coding Agents (Claude Code, Cursor, Gemini) (github.com)

    Hi everyone I am the author of Gryph. I have been using AI coding agents daily and realized I had no idea what they were actually doing across sessions. Sure, I could check git diff, but that doesn't show: - Files the…

    1 points 0
  12. Agent Skills Threat Model (safedep.io)
    3 points 0
  13. Catching malicious package releases using a transparency log (blog.trailofbits.com)
    3 points 0
  14. CVE-2025-66491: Traefik's "Verify=on" Turned TLS Off (aisle.com)
    1 points 0
  15. DarkGPT: Malicious Visual Studio Code Extension Targeting Developers (safedep.io)
    2 points 0
  16. Exposing and Exploiting Incomplete Branch Predictor Isolation in Cloud (comsec.ethz.ch)
    1 points 0
  17. KnownSec breach: What we know so far (substack.com)
    1 points 0
  18. Buying browser extensions for fun and profit (secureannex.com)
    3 points 1
  19. Curious Case of Embedded Executable in a Newly Introduced Transitive Dependency (safedep.io)
    4 points 0
  20. 1 points 0
  21. NPM Supply Chain Malware with Self-Replicating Behaviour (safedep.io)
    2 points 0
  22. Tensorflow.js Typosquatting Attack: Malicious Package Targeting AI/ML Developers (safedep.io)
    2 points 0
  23. Secure Vibe Coding with AI Agents (safedep.io)
    2 points 0
  24. ESLint-config-prettier: How NPM Package with 30M Downloads Spread Malware (safedep.io)
    1 points 0
  25. Scavenger Malware Distributed via ESLint-Config-Prettier NPM Package Hack (invokere.com)
    1 points 0