chillax

mese scorsodiscuss

Companies such as socket and safedep will still scan new packages and alert on malware (if they are able to detect it) so the packages are taken down before they pass your cool down

chillax

3 mesi fadiscuss

You could se if it helps with https://betterexplained.com/calculus/lesson-1/ or https://youtu.be/WUvTyaaNkzM

chillax

5 mesi fadiscuss

Related: Someone Knows Bash Far Too Well, And We Love It (Ivanti EPMM Pre-Auth RCEs CVE-2026-1281 & CVE-2026-1340) https://labs.watchtowr.com/someone-knows-bash-far-too-well-a...

chillax

8 mesi fadiscuss

Some are testing viability

https://www.luftfartstilsynet.no/en/about-us/news/news-2025/...

chillax

10 mesi fadiscuss

According to Aikido Security the attack has now targeted 180+ packages: https://www.aikido.dev/blog/s1ngularity-nx-attackers-strike-...

Submissions

Squidbleed (CVE-2026-47729) Heartbleeds ancient cousin, hiding in Squid since 97

Mellum2 Goes Open Source: A Fast Model for AI Workflows

Disrupting Glassworm: Inside CrowdStrike's Takedown of a Dev-Targeting Botnet

Catch hallucinated, typosquatted, non-canonical dependencies before production

Vulnpocalypse: AI, Open Source, and the Race to Remediate

The Team PCP Snowball Effect: A Quantitative Analysis

The Comforting Lie of SHA Pinning

[untitled]

Invisible Prompt Injection Through Markdown and HTML-Comments

[untitled]

Turning Cloudflare into an SSRF Engine,Reaching What You Were Never Meant to See

Ubiquiti: The U.S. Tech Enabling Russia's Drone War

AI's Bottleneck Isn't Models or Tools, It's Security

React2shell

CyberSlop – meet the new threat actor, MIT and Safe Security

AuditKit – Multi-framework compliance scanner

AMD signs AI chip-supply deal with OpenAI, gives it option to take a 10% stake

Security Degradation in Iterative AI Code Generation

JEP 500: Prepare to Make Final Mean Final

comments