lateos-ai

vor 26 Tagendiscuss

[flagged]

letzten Monatdiscuss

# Install globally npm install -g @lateos/npm-scan

letzten Monatdiscuss

Detection validation on three real-world campaigns from June 2026: - @redhat-cloud-services Miasma (32 packages) - TanStack Mini Shai-Hulud (84 versions) - Axios Backdoor (transitive injection)

Detectors: Self-propagation, encrypted C2, transitive deps, maintainer compromise.

lateos-ai

letzten Monatdiscuss

[flagged]

lateos-ai

letzten Monatdiscuss

[flagged]

lateos-ai

letzten Monatdiscuss

[flagged]

lateos-ai

letzten Monatdiscuss

[flagged]

lateos-ai

vor 2 Monatendiscuss

I am working on npm supply-chain security. My tool is called @lateos/npm-scanner You can install it via npm -I @lateos/npm-scanner . The npm readme page is at https://www.npmjs.com/package/@lateos/npm-scan and open spruce is at https://github.com/lateos-ai/npm-scan . I appreciate all input and feedback

lateos-ai

vor 2 Monatendiscuss

[dead]

Submissions

GPT-5 Nano Vulnerability test results you should know before deploying

NPM-Scan v1.4.1: Detecting IronWorm, Miasma Escalated, and Dependency Confusion

NPM-Scan: Detecting Six Major NPM Supply Chain Campaigns (June 2026)

Lateos/NPM-scan v1.2.0: Detecting Native Addon Malware (node-gyp Abuse)

NPM-Scan v1.1.0: Four New Detectors for June 2026 Supply Chain Attacks

NPM-Scan: Detecting Supply Chain Attacks (100% Validation on Real Campaigns)

Show HN: Lateos/NPM-scan – open-source NPM supply chain scanner, v0.18.3

Show HN: MigraDiff – migra fork with AI migration generation for Postgres

Npm-scan: Modern supply chain security for the npm ecosystem

Show HN: MigraDiff v1.3.0 – PostgreSQL schema diff with AI migration explanation

Show HN: MigraDiff – maintained fork of migra (PostgreSQL schema diff)

NPM-Scan – Detects TanStack Worm, Beats Socket/Snyk (Local/BYOC)

comments