Sudhanshu2310

3 ms·

1. 1.▲
   by Sudhanshu2310 4mo ago

   We have done the complete analysis and there are 32 packages share the same publishing pipeline. https://safedep.io/redhat-cloud-services-hit-by-mini-shai-hu...
2. 2.▲
   Megalodon: Mass GitHub Repo Backdooring via CI Workflows(safedep.io)

   17 points by Sudhanshu2310 5mo ago|0 comments
3. 3.▲
   Someone published a trojan inside a clone of react-refresh

   1 points by Sudhanshu2310 7mo ago|0 comments
4. 4.▲
   The software supply chain has a new problem: AI agents(safedep.io)

   4 points by Sudhanshu2310 7mo ago|0 comments
5. 5.▲
   Malicious NPM package pino-SDK-v2 exfiltrates .env secrets to Discord

   2 points by Sudhanshu2310 7mo ago|1 comments