abhisek

802 karmajoined May 1, 2012On HN

Dabbling into open source software supply chain security

github.com/safedep/pmg

Recent submissions

Malicious Rust crate Arrayref runs a build-time payload safedep.io
554abhisek23d513 comments
OpenAI’s accidental attack against Hugging Face is science fiction that happened simonwillison.net
587abhisek1mo450 comments
Show HN: PMG, open source package firewall github.com/safedep
4abhisek1mo2 comments
Jscrambler 8.14.0 Compromised with Credential Stealer safedep.io
3abhisek2modiscuss
Claude Mythos and Cybersecurity schneier.com
4abhisek4modiscuss
Coruna: The Mysterious Journey of a Powerful iOS Exploit Kit cloud.google.com
1abhisek5modiscuss
Step by Step Analysis of Malicious NPM Package safedep.io
1abhisek6modiscuss
OpenClaw bot calls out maintainer when its PR got rejected crabby-rathbun.github.io
1abhisek6modiscuss
Show HN: Gryph – Audit Trail for AI Coding Agents (Claude Code, Cursor, Gemini)github.com/safedep
1abhisek7modiscuss
Agent Skills Threat Model safedep.io
3abhisek7modiscuss
Catching malicious package releases using a transparency log blog.trailofbits.com
3abhisek8modiscuss
CVE-2025-66491: Traefik's "Verify=on" Turned TLS Off aisle.com
1abhisek9modiscuss
DarkGPT: Malicious Visual Studio Code Extension Targeting Developers safedep.io
2abhisek9modiscuss
Exposing and Exploiting Incomplete Branch Predictor Isolation in Cloud comsec.ethz.ch
1abhisek9modiscuss
KnownSec breach: What we know so far substack.com
1abhisek10modiscuss
Buying browser extensions for fun and profit secureannex.com
3abhisek10mo1 comment
Curious Case of Embedded Executable in a Newly Introduced Transitive Dependency safedep.io
4abhisek10modiscuss
NPM Supply Chain Malware with Self-Replicating Behaviour safedep.io
2abhisek11modiscuss
Tensorflow.js Typosquatting Attack: Malicious Package Targeting AI/ML Developers safedep.io
2abhisek1ydiscuss
Secure Vibe Coding with AI Agents safedep.io
2abhisek1ydiscuss
ESLint-config-prettier: How NPM Package with 30M Downloads Spread Malware safedep.io
1abhisek1ydiscuss
Scavenger Malware Distributed via ESLint-Config-Prettier NPM Package Hack invokere.com
1abhisek1ydiscuss
Near Real-Time Stream of Open Source Packages Published to Public Registries vetpkg.dev
2abhisek1ydiscuss
Critical RCE Vulnerability in Anthropic MCP Inspector – CVE-2025-49596 oligo.security
5abhisek1y1 comment

All submissions and comments on Hacker News.