Search: socket.dev | Heykuki News

HK

Heykuki News

Top New Best Ask Show Jobs

Top New Best Ask Show Jobs

1.

Shai-Hulud malware attack: Tinycolor and over 40 NPM packages compromised

9 months ago

1233 points

2.

Shai-Hulud Themed Malware Found in the PyTorch Lightning AI Training Library

2 months ago

465 points

3.

Malware developers added nuclear and biological weapons text to to their spyware

11 days ago

459 points

4.

Show HN: Socket – Secure your JavaScript supply chain

4 years ago

133 points

5.

Show HN: Resource Index – FOSS Git Repository and NPM Package Index

res-index.hkit.cc

2 years ago

14 points

6.

Show HN: Socket web extension – free NPM supply chain protection

chrome.google.com

3 years ago

10 points

7.

Show HN: Aidevshield NPM audit for AI coding tool workflows

github.com/aidevshield

4 months ago

1 points

8.

Bitwarden CLI compromised in ongoing Checkmarx supply chain campaign

2 months ago

872 points

9.

Trivy under attack again: Widespread GitHub Actions tag compromise secrets

3 months ago

250 points

10.

NPM to implement staged publishing after turbulent shift off classic tokens

5 months ago

205 points

11.

The Everything NPM Package

2 years ago

192 points

12.

The push to ban ransom payments is gaining momentum

2 years ago

127 points

13.

Social engineering campaign targeting tech employees spreads through NPM malware

3 years ago

114 points

14.

Active NPM supply chain attack: Tinycolor and 40 Packages Compromised

9 months ago

85 points

15.

German Court Fines Security Researcher for Reporting Company's Vulnerabilities

2 years ago

77 points

16.

OpenJS: "XZ Utils Cyberattack Likely Not an Isolated Incident"

2 years ago

65 points

17.

What's Going on Inside Your Node_modules Folder?

4 years ago

64 points

18.

Chinese devs are storing 1000s of eBooks on GitHub and NPM

4 years ago

62 points

19.

Unverified NPM Account Takeover Vulnerability for Sale on Dark Web Forum

2 years ago

53 points

20.

Prettier NPM Packages Compromised in Supply Chain Attack

a year ago

45 points

21.

Namecheap Takes Down Polyfill.io Service Following Supply Chain Attack

2 years ago

42 points

22.

Curl Project and Go Security Teams Reject CVSS as Broken

a year ago

40 points

23.

AI Hallucinations Are Fueling a New Class of Supply Chain Attacks

a year ago

31 points

24.

Gem.Coop – Community-Run Alternative to Rubygems.org, Led by Former Maintainers

9 months ago

30 points

25.

Libxml2 Maintainer Ends Embargoed Vulnerability Reports, Citing Unsustainable

a year ago

27 points

26.

DuckDB NPM Account Compromised in Continuing Supply Chain Attack

9 months ago

27 points

27.

Automated Spam Campaign Floods GitHub/NPM with 1000s of Garbage Packages

2 years ago

25 points

28.

New Rust RFC Proposes Adding Support for Trusted Publishing to Crates.io

2 years ago

24 points

29.

New Proposed CISA Mandate Would Require Critical Infrastructure to Report Ransom

2 years ago

19 points

30.

Malicious Postinstall Hook Found in 700 GitHub Repos, Including Node Projects

a month ago

882542F3884314B

18 points