Search: safedep.io | Heykuki News

Heykuki News

Top New Best Ask Show Jobs

Top New Best Ask Show Jobs

1.

Malicious NPM package pino-SDK-v2 exfiltrates .env secrets to Discord

2 points

3 months ago

2.

Mini Shai-Hulud Strikes Again: 314 npm Packages Compromised (safedep.io)

389 points

theanonymousone

18 days ago

3.

Mass NPM Supply Chain Attack Hits TanStack, Mistral AI, and 170 Packages (safedep.io)

18 points

25 days ago

4.

Megalodon: Mass GitHub Repo Backdooring via CI Workflows (safedep.io)

17 points

15 days ago

5.

Axios 1.14.1 and 0.30.4 Compromised via Stolen Maintainer Account on NPM (safedep.io)

8 points

2 months ago

6.

Dynamic Malware Analysis of Open Source Packages at Scale (safedep.io)

8 points

a year ago

7.

ESLint-Config-Prettier Compromised (safedep.io)

7 points

10 months ago

8.

Team PCP Strikes again – `telnyx` on PyPI gets compromised (safedep.io)

5 points

2 months ago

9.

Megalodon: Mass GitHub Repo Backdooring via CI Workflows (safedep.io)

4 points

15 days ago

10.

The software supply chain has a new problem: AI agents (safedep.io)

4 points

3 months ago

11.

Curious Case of Embedded Executable in a Newly Introduced Transitive Dependency (safedep.io)

4 points

7 months ago

12.

Someone compromised SAP's NPM packages and used the CI pipeline against itself (safedep.io)

3 points

a month ago

13.

Agent Skills Threat Model (safedep.io)

3 points

4 months ago

14.

Malicious NPM Package Impersonating Popular Express Cookie Parser (safedep.io)

3 points

a year ago

15.

SafeDep Vet - Open Source software supply chain dependency risks (safedep.io)

2 points

3 years ago

16.

Compromised telnyx on PyPI (safedep.io)

2 points

2 months ago

17.

Megalodon: Mass GitHub Repo Backdooring via CI Workflows (safedep.io)

2 points

14 days ago

18.

Mass Supply Chain Attack Hits TanStack, Mistral AI NPM and PyPI Packages (safedep.io)

2 points

patching-trowel

24 days ago

19.

Mass Supply Chain Attack Hits TanStack, Mistral AI NPM and PyPI Packages (safedep.io)

2 points

25 days ago

20.

Fairwords NPM packages compromised by credential worm stealing tokens and (safedep.io)

2 points

2 months ago

21.

Malicious Packages Targeting Strapi Plugin Ecosystem Being Actively Published (safedep.io)

2 points

2 months ago

22.

DarkGPT: Malicious Visual Studio Code Extension Targeting Developers (safedep.io)

2 points

6 months ago

23.

NPM Supply Chain Malware with Self-Replicating Behaviour (safedep.io)

2 points

9 months ago

24.

Tensorflow.js Typosquatting Attack: Malicious Package Targeting AI/ML Developers (safedep.io)

2 points

10 months ago

25.

Secure Vibe Coding with AI Agents (safedep.io)

2 points

10 months ago

26.

ESLint-config-prettier was compromised for 24hours (safedep.io)

2 points

10 months ago

27.

Catching the Silent Threat: How Dynamic Analysis Revealed an NPM Attack Chain (safedep.io)

2 points

a year ago

28.

Why Open Source Risks Are Larger Than Only Software Composition Analysis (safedep.io)

2 points

2 years ago

29.

Typosquatt alert Malicious NPM Package: NYC-config (safedep.io)

1 point

a year ago

30.

Enforcing Dependency Cooldowns with CEL's Now() – Block Recent Package (safedep.io)

1 point

2 months ago