6mile
- Karma
- 22
- Created
- 4 years ago
About
Software supply chain research, created GitHax, threat intel platform for supply chain threats and former founder of SecureStack. Author of open-source projects like the DevSecOps Playbook, TVPO threat modelling framework, and more.Recent Submissions
- 1. ▲ VSCode Tasks files used in new malware campaign (opensourcemalware.com)
- 2. ▲ Undelete NPM Packages (npmjs.com)
- 3. ▲ Three myths about NPM Malware (sourcecodered.com)
- 4. ▲ Malicious NPM package targets prettier library (sourcecodered.com)
- 5. ▲ NPM packages deploy reverse shells when installed (sourcecodered.com)
- 6. ▲ New Gitloker attack targets GitHub users (sourcecodered.com)
- 7. ▲ Show HN: Visualize your software supply chain (github.com)
- 8. ▲ Real-time continuous compliance for the SDLC (securestack.com)
- 9. ▲ Show HN: DevSecOps Playbook – step by step guide to building more secure apps (github.com)
- 10. ▲ Show HN: GitHub Action to find Log4j vulnerabilities (github.com)