abhisek

Karma: 802
Created: 14 years ago

About

Dabbling into open source software supply chain security

github.com/safedep/pmg

Recent Submissions

1. ▲ Malicious Rust crate Arrayref runs a build-time payload (safedep.io) 554 points · 20 days ago · 513 comments
2. ▲ OpenAI’s accidental attack against Hugging Face is science fiction that happened (simonwillison.net) 587 points · 1 month ago · 450 comments
3. ▲ Show HN: PMG, open source package firewall (github.com) 4 points · 1 month ago · 2 comments
4. ▲ Jscrambler 8.14.0 Compromised with Credential Stealer (safedep.io) 3 points · 2 months ago · 0 comments
5. ▲ Claude Mythos and Cybersecurity (schneier.com) 4 points · 4 months ago · 0 comments
6. ▲ Coruna: The Mysterious Journey of a Powerful iOS Exploit Kit (cloud.google.com) 1 point · 5 months ago · 0 comments
7. ▲ Step by Step Analysis of Malicious NPM Package (safedep.io) 1 point · 6 months ago · 0 comments
8. ▲ OpenClaw bot calls out maintainer when its PR got rejected (crabby-rathbun.github.io) 1 point · 6 months ago · 0 comments
9. ▲ Show HN: Gryph – Audit Trail for AI Coding Agents (Claude Code, Cursor, Gemini) (github.com) 1 point · 7 months ago · 0 comments

All submissions on HN · View profile on HN