HN Explorer

varunsharma07

↗ HN profile [ 102 ms ] full profile
Karma
0
Created
()
Submissions
0
  1. Immobiliarelabs NPM packages have been compromised (github.com)
    2 points 0
  2. Codfish/semantic-release-action GitHub Action has been compromised (stepsecurity.io)
    4 points 0
  3. Multiple mastra NPM packages compromised (github.com)
    4 points 1
  4. Ongoing NPM supply chain attack uses binding.gyp to spread like a worm (github.com)
    6 points 0
  5. Laravel-Lang Supply Chain Attack (github.com)
    3 points 1
  6. NX VS Code extension compromised again (github.com)
    4 points 0
  7. Actions-cool/issues-helper GitHub Action Compromised (github.com)
    3 points 0
  8. Malicious node-IPC Versions Published to NPM (github.com)
    6 points 3
  9. Postmortem: TanStack NPM supply-chain compromise (tanstack.com)

    https://github.com/TanStack/router/issues/7383

    1097 points 89
  10. 1 points 1
  11. Hundreds of GitHub Python Repos Compromised via Account Takeover and Force-Push (stepsecurity.io)
    5 points 1
  12. Show HN: Scan your dev machine for AI agents, MCP servers, and IDE extensions (github.com)
    9 points 0
  13. Xygeni/xygeni-action GitHub Action is compromised – poisoned tag is still live (stepsecurity.io)
    2 points 0
  14. Hackerbot-Claw: AI Bot Exploiting GitHub Actions – Microsoft, Datadog Hit So Far (stepsecurity.io)
    27 points 4
  15. GitHub Actions is left vulnerable to supply chain attacks: Datadog Report (datadoghq.com)
    4 points 0
  16. Cline Supply Chain Attack: Cline 2.3.0 Silently Installs OpenClaw (stepsecurity.io)
    12 points 1
  17. Harden Runner Detected the SHA1-Hulud Supply Chain Attack in CNCF's Backstage (stepsecurity.io)
    1 points 1
  18. Popular Nx Build System NPM Package Compromised with Data Stealing Malware (stepsecurity.io)
    10 points 2
  19. Suspicious Tag Change in AWS's GitHub Action: What Happened and Why It Matters (stepsecurity.io)
    3 points 1
  20. Num2words PyPI Package Compromised (stepsecurity.io)
    22 points 3
  21. eslint-config-prettier npm package compromised (stepsecurity.io)
    74 points 9
  22. Grafana GitHub Actions Security Incident (stepsecurity.io)
    10 points 2
  23. Tj-actions/changed-files GitHub Action Compromised – used by over 23K repos (stepsecurity.io)
    273 points 316
  24. CI/CD supply chain attack on Azure Karpenter Provider open-source project (stepsecurity.io)
    3 points 2
  25. Security Breach in Stripe Repo: A Deep Dive into the "Pwn Request" Vulnerability (stepsecurity.io)
    7 points 0