abhisek

Karma: 1,108
Created: 14 years ago

About

Dabbling into open source software supply chain security

github.com/safedep/pmg

Recent Submissions

1. ▲ Compromised LiteLLM 1.107.0 on PyPI Installs a Credential Stealer and Backdoor (safedep.io) 596 points · 5 days ago · 197 comments
2. ▲ Package managers have an integrity problem (blog.trailofbits.com) 4 points · 11 days ago · 0 comments
3. ▲ Why does mathmain need an encrypted loader? (safedep.io) 138 points · 1 month ago · 43 comments
4. ▲ Malicious Rust crate Arrayref runs a build-time payload (safedep.io) 554 points · 2 months ago · 511 comments
5. ▲ OpenAI’s accidental attack against Hugging Face is science fiction that happened (simonwillison.net) 587 points · 3 months ago · 450 comments
6. ▲ Show HN: PMG, open source package firewall (github.com) 4 points · 3 months ago · 2 comments
7. ▲ Jscrambler 8.14.0 Compromised with Credential Stealer (safedep.io) 3 points · 3 months ago · 0 comments
8. ▲ Claude Mythos and Cybersecurity (schneier.com) 4 points · 6 months ago · 0 comments
9. ▲ Coruna: The Mysterious Journey of a Powerful iOS Exploit Kit (cloud.google.com) 1 point · 6 months ago · 0 comments
10. ▲ Step by Step Analysis of Malicious NPM Package (safedep.io) 1 point · 8 months ago · 0 comments

All submissions on HN · View profile on HN