Search: safemap.io | Heykuki News

Heykuki News

Top New Best Ask Show Jobs

Top New Best Ask Show Jobs

1.

Show HN: Play with an interactive heatmap of SF crime (and other cities) (safemap.io)

141 points

SafemapTecnolgs

2 years ago

2.

Malicious NPM package pino-SDK-v2 exfiltrates .env secrets to Discord

2 points

3 months ago

3.

Mini Shai-Hulud Strikes Again: 314 npm Packages Compromised (safedep.io)

390 points

theanonymousone

20 days ago

4.

Mass NPM Supply Chain Attack Hits TanStack, Mistral AI, and 170 Packages (safedep.io)

18 points

a month ago

5.

Megalodon: Mass GitHub Repo Backdooring via CI Workflows (safedep.io)

17 points

18 days ago

6.

Axios 1.14.1 and 0.30.4 Compromised via Stolen Maintainer Account on NPM (safedep.io)

8 points

2 months ago

7.

Dynamic Malware Analysis of Open Source Packages at Scale (safedep.io)

8 points

a year ago

8.

ESLint-Config-Prettier Compromised (safedep.io)

7 points

a year ago

9.

Team PCP Strikes again – `telnyx` on PyPI gets compromised (safedep.io)

5 points

2 months ago

10.

Megalodon: Mass GitHub Repo Backdooring via CI Workflows (safedep.io)

4 points

17 days ago

11.

The software supply chain has a new problem: AI agents (safedep.io)

4 points

3 months ago

12.

Curious Case of Embedded Executable in a Newly Introduced Transitive Dependency (safedep.io)

4 points

7 months ago

13.

Someone compromised SAP's NPM packages and used the CI pipeline against itself (safedep.io)

3 points

a month ago

14.

Agent Skills Threat Model (safedep.io)

3 points

4 months ago

15.

Malicious NPM Package Impersonating Popular Express Cookie Parser (safedep.io)

3 points

a year ago

16.

SafeDep Vet - Open Source software supply chain dependency risks (safedep.io)

2 points

3 years ago

17.

Compromised telnyx on PyPI (safedep.io)

2 points

2 months ago

18.

Megalodon: Mass GitHub Repo Backdooring via CI Workflows (safedep.io)

2 points

16 days ago

19.

Mass Supply Chain Attack Hits TanStack, Mistral AI NPM and PyPI Packages (safedep.io)

2 points

patching-trowel

a month ago

20.

Mass Supply Chain Attack Hits TanStack, Mistral AI NPM and PyPI Packages (safedep.io)

2 points

a month ago

21.

Fairwords NPM packages compromised by credential worm stealing tokens and (safedep.io)

2 points

2 months ago

22.

Malicious Packages Targeting Strapi Plugin Ecosystem Being Actively Published (safedep.io)

2 points

2 months ago

23.

DarkGPT: Malicious Visual Studio Code Extension Targeting Developers (safedep.io)

2 points

6 months ago

24.

NPM Supply Chain Malware with Self-Replicating Behaviour (safedep.io)

2 points

9 months ago

25.

Tensorflow.js Typosquatting Attack: Malicious Package Targeting AI/ML Developers (safedep.io)

2 points

10 months ago

26.

Secure Vibe Coding with AI Agents (safedep.io)

2 points

10 months ago

27.

ESLint-config-prettier was compromised for 24hours (safedep.io)

2 points

10 months ago

28.

Catching the Silent Threat: How Dynamic Analysis Revealed an NPM Attack Chain (safedep.io)

2 points

a year ago

29.

Why Open Source Risks Are Larger Than Only Software Composition Analysis (safedep.io)

2 points

2 years ago

30.

Typosquatt alert Malicious NPM Package: NYC-config (safedep.io)

1 point

a year ago