HNHacker News
TopNewBestAskShowJobs

6mile

135 karma · joined December 30, 2020

Software supply chain research, created GitHax, threat intel platform for supply chain threats and former founder of SecureStack. Author of open-source projects like the DevSecOps Playbook, TVPO threat modelling framework, and more.
submissionscomments

PolinRider Is Coming

opensourcemalware.com·2 pts·6mile·
0

Rubygem typosquat campaign deploys Windows stealer

opensourcemalware.com·2 pts·6mile·
0

North Korea NullReceiver Hides Malware in NPM

opensourcemalware.com·2 pts·6mile·
1

North Korean Hackers Compromise Go and PHP Packages

opensourcemalware.com·11 pts·6mile·
1

NPM attack targets Zapier and security tool browser extensions

opensourcemalware.com·5 pts·6mile·
1

Microsoft Compromised Again. Shuts Down Azure Function GitHub Actions

opensourcemalware.com·49 pts·6mile·
2

More live NPM packages attributed to Axios threat actors

opensourcemalware.com·3 pts·6mile·
1

Popular Kubernetes Networking Project Antrea Compromised

opensourcemalware.com·3 pts·6mile·
1

Popular Kubernetes Networking Project Antrea Compromised

opensourcemalware.com·2 pts·6mile·
0

Intercom-client NPM package and lightning PyPI packages compromised

opensourcemalware.com·2 pts·6mile·
1

Bitwarden CLI NPM package has been compromised

opensourcemalware.com·16 pts·6mile·
1

Vercel Incident Response Playbook

github.com·7 pts·6mile·
4

GitHub Accounts Compromised

opensourcemalware.com·13 pts·6mile·
2

Neutralinojs developer framework compromised with malware

opensourcemalware.com·1 pts·6mile·
0

Malicious skills targeting Claude Code and Moltbot users

opensourcemalware.com·181 pts·6mile·
87

New Python "RAT-as-a-library" named "Scopper"

getsafety.com·1 pts·6mile·
1

VSCode Tasks files used in new malware campaign

opensourcemalware.com·4 pts·6mile·
0

Undelete NPM Packages

npmjs.com·3 pts·6mile·
1

Three myths about NPM Malware

sourcecodered.com·1 pts·6mile·
1

Malicious NPM package targets prettier library

sourcecodered.com·15 pts·6mile·
7

NPM packages deploy reverse shells when installed

sourcecodered.com·4 pts·6mile·
0

New Gitloker attack targets GitHub users

sourcecodered.com·1 pts·6mile·
0

Show HN: Visualize your software supply chain

github.com·4 pts·6mile·
1

Real-time continuous compliance for the SDLC

securestack.com·1 pts·6mile·
0

Show HN: DevSecOps Playbook – step by step guide to building more secure apps

github.com·1 pts·6mile·
0

Show HN: GitHub Action to find Log4j vulnerabilities

github.com·2 pts·6mile·
0

Lessons learned on how to secure Git

securestack.com·3 pts·6mile·
0