abhisek
- Karma
- 286
- Created
- 13 years ago
About
Dabbling into open source software supply chain securitygithub.com/safedep/vet
Recent Submissions
- 1. ▲ CVE-2025-66491: Traefik's "Verify=on" Turned TLS Off (aisle.com)
- 2. ▲ DarkGPT: Malicious Visual Studio Code Extension Targeting Developers (safedep.io)
- 3. ▲ Exposing and Exploiting Incomplete Branch Predictor Isolation in Cloud (comsec.ethz.ch)
- 4. ▲ KnownSec breach: What we know so far (substack.com)
- 5. ▲ Buying browser extensions for fun and profit (secureannex.com)
- 6. ▲ Curious Case of Embedded Executable in a Newly Introduced Transitive Dependency (safedep.io)
- 7. ▲ NPM Supply Chain Malware with Self-Replicating Behaviour (safedep.io)
- 8. ▲ Tensorflow.js Typosquatting Attack: Malicious Package Targeting AI/ML Developers (safedep.io)
- 9. ▲ Secure Vibe Coding with AI Agents (safedep.io)
- 10. ▲ ESLint-config-prettier: How NPM Package with 30M Downloads Spread Malware (safedep.io)