Search: socket.dev | Heykuki News

HK

Heykuki News

Top New Best Ask Show Jobs

Top New Best Ask Show Jobs

31.

Go Supply Chain Attack: Malicious Package Exploits Go Module Proxy Caching For

a year ago

17 points

32.

Go Supply Chain Attack: Malicious Package Exploits Go Module

a year ago

17 points

33.

Supply Chain Attack Detected in Solana/Web3.js Library

2 years ago

17 points

34.

AI Agent Lands PRs in Major OSS Projects, Targets Maintainers via Cold Outreach

4 months ago

16 points

35.

$4.6M Series Seed to defend open source from supply chain attacks

4 years ago

14 points

36.

NPM 'Is' Package Hijacked in Expanding Supply Chain Attack

a year ago

14 points

37.

Open Source Maintainers Demand Ability to Block Copilot-Generated Issues and PRs

a year ago

14 points

38.

Researcher Exposes 0-Day Clickjacking Vulnerabilities in Major Password Managers

10 months ago

13 points

39.

Socket AI – Scan every NPM and PyPI package for malware with ChatGPT

3 years ago

13 points

40.

Express.js Spam PRs Highlight the Commoditization of Open Source Contributions

2 years ago

13 points

41.

Slopsquatting: AI Hallucinations Fuel New Class of Supply Chain Attacks

a year ago

12 points

42.

Supply Chain Attacks Targeting LLM Application Developers: The Hidden Dangers Of

2 years ago

12 points

43.

The Rise of Slopsquatting

a year ago

11 points

44.

AI Slop Is Polluting Bug Bounty Platforms with Fake Vulnerability Reports

a year ago

11 points

45.

Typosquatted Go Packages Deliver Malware Loader Targeting Linux and macOS

a year ago

11 points

46.

NIST's New Password Guidelines Will Eliminate Periodic Changes and Special

2 years ago

11 points

47.

Threat Actor Exposes Playbook for Exploiting NPM to Build Blockchain-Powered

2 years ago

11 points

48.

Socket, an open source supply chain security platform

4 years ago

11 points

49.

Contagious Interview Campaign Escalates with 67 Malicious NPM Packages and New

a year ago

10 points

50.

The GitHub Infrastructure Powering North Korea's Contagious Interview NPM Attack

7 months ago

giuliomagnifico

10 points

51.

Shai-Hulud-Style NPM Worm Hijacks CI Workflows and Poisons AI Toolchains

4 months ago

10 points

52.

Wget to Wipeout: Malicious Go Modules Fetch Destructive Payload

a year ago

10 points

53.

Laravel Lang Compromised with RCE Backdoor Across 700 Versions

a month ago

9 points

54.

Ongoing Supply Chain Attack Targets CrowdStrike NPM Packages

9 months ago

9 points

55.

Free Software Foundation Goes to Bat for AGPL in Amicus Brief Criticizing

a year ago

9 points

56.

Redis License Shift Splits Community: Open-Source Contributors Move to Fork

2 years ago

9 points

57.

Node.js Community Debate Intensifies over Potentially Unbundling NPM

2 years ago

9 points

58.

New Website "Is It FOSS?" Tracks Transparency in Open Source Distribution

10 months ago

8 points

59.

AI Slop Is Polluting Bug Bounty Platforms with Fake Vulnerability Reports

a year ago

8 points

60.

Shai-Hulud-Style NPM Worm Hijacks CI Workflows and Poisons AI Toolchains

4 months ago

8 points