HNHacker News
TopNewBestAskShowJobs

abhisek

844 karma · joined May 1, 2012

Dabbling into open source software supply chain security

github.com/safedep/pmg

submissionscomments

Kubernetes Limits Links to Third Party Projects

github.com·2 pts·abhisek·
0

Sneaky Malware Hidden in Transitive Dependency of ESLint-config-Airbnb-compat

root.sigsegv.in·3 pts·abhisek·
0

PMG: Wraps Package Managers to Prevent Installation of Malicious OSS Packages

github.com·6 pts·abhisek·
0

Why Build Software Frameworks

root.sigsegv.in·2 pts·abhisek·
0

AI Agents Are Here. So Are the Threats

unit42.paloaltonetworks.com·1 pts·abhisek·
0

Dynamic Malware Analysis of Open Source Packages at Scale

safedep.io·8 pts·abhisek·
0

DeepWiki Generated Technical Documentation for My OSS Security Project

deepwiki.com·2 pts·abhisek·
1

Verizon 2025 Data Breach Investigations Report [pdf]

verizon.com·2 pts·abhisek·
0

LLMs with the Model Context Protocol Allow Major Security Exploits

arxiv.org·2 pts·abhisek·
0

Detecting Malicious Source Code in PyPI Packages with LLMs

arxiv.org·2 pts·abhisek·
1

Show HN: MCP Server Built in Go for Pinning GitHub Actions

github.com·2 pts·abhisek·
0

Show HN: Scan GitHub Actions for Malicious Code

github.com·1 pts·abhisek·
0

Typosquatt alert Malicious NPM Package: NYC-config

safedep.io·1 pts·abhisek·
1

Show HN: Eliminating Vulnerability False Positives Through Code Analysis

docs.safedep.io·1 pts·abhisek·
0

Show HN: Vetpkg.dev – open-source Package Security Dashboard

vetpkg.dev·1 pts·abhisek·
0

What Is Next Generation Software Composition Analysis?

safedep.io·1 pts·abhisek·
0

Show HN: vet – Adding Support for Open Source Package Malware Scanning

github.com·2 pts·abhisek·
0

Malicious NPM Packages Using Burp Collaborator for Dependency Confusion Attack

safedep.io·1 pts·abhisek·
0

Show HN: Vet – Open-Source Software Supply Chain Security Tool

github.com·3 pts·abhisek·
0

Why Open Source Risks Are Larger Than Only Software Composition Analysis

safedep.io·2 pts·abhisek·
0

Lockfiles are an attack vector for introducing malware in software supply chain

safedep.substack.com·1 pts·abhisek·
1

Show HN: Vet now supports detecting malicious packages

github.com·6 pts·abhisek·
0

Show HN: I built a tool for policy driven vetting of open source packages

github.com·7 pts·abhisek·
0

Show HN: A Git Repository Structure Validation Tool

github.com·1 pts·abhisek·
0
← PreviousPage 2 of 2