| user: | 6mile |
| created: | December 30, 2020 |
| karma: | 109 |
| about: | Software supply chain research, created GitHax, threat intel platform for supply chain threats and former founder of SecureStack. Author of open-source projects like the DevSecOps Playbook, TVPO threat modelling framework, and more. |
| 1. | Popular Kubernetes Networking Project Antrea Compromised(opensourcemalware.com) |
| 2. | Popular Kubernetes Networking Project Antrea Compromised(opensourcemalware.com) |
| 3. | Intercom-client NPM package and lightning PyPI packages compromised(opensourcemalware.com) |
| 4. | Bitwarden CLI NPM package has been compromised(opensourcemalware.com) |
| 5. | Vercel Incident Response Playbook(github.com) |
| 6. | GitHub Accounts Compromised(opensourcemalware.com) |
| 7. | Neutralinojs developer framework compromised with malware(opensourcemalware.com) |
| 8. | Malicious skills targeting Claude Code and Moltbot users(opensourcemalware.com) |
| 9. | New Python "RAT-as-a-library" named "Scopper"(getsafety.com) |
| 10. | VSCode Tasks files used in new malware campaign(opensourcemalware.com) |
| 11. | |
| 12. | Undelete NPM Packages(npmjs.com) |
| 13. | |
| 14. | |
| 15. | |
| 16. | |
| 17. | |
| 18. | |
| 19. | Three myths about NPM Malware(sourcecodered.com) |