Viewing profile — Sudhanshu2310

Sudhanshu2310

HN member

No profile information was provided.

comment
Comment #48356929
We have done the complete analysis and there are 32 packages share the same publishing pipeline. https://safedep.io/redhat-cloud-services-hit-by-mini-shai-hu...

Mon, Jun 01, 2026, 1:55 PM UTC
comment
Comment #48226366
[flagged]

Thu, May 21, 2026, 5:38 PM UTC
story
Megalodon: Mass GitHub Repo Backdooring via CI Workflows
Thu, May 21, 2026, 5:38 PM UTC
story
Comment #47598011
Wed, Apr 01, 2026, 7:40 AM UTC
story
Comment #47541274
Fri, Mar 27, 2026, 11:14 AM UTC
story
Comment #47513321
Wed, Mar 25, 2026, 4:39 AM UTC
story
Someone published a trojan inside a clone of react-refresh
We just found and reported a malicious npm package impersonating react-refresh - 42 million weekly downloads, used in virtually every React build toolchain. One file modified. Rest…

Mon, Mar 16, 2026, 4:06 PM UTC
comment
Comment #47397919
[dead]

Mon, Mar 16, 2026, 12:13 PM UTC
story
The software supply chain has a new problem: AI agents
Mon, Mar 16, 2026, 12:13 PM UTC
story
Malicious NPM package pino-SDK-v2 exfiltrates .env secrets to Discord
We just analyzed a fresh supply chain attack on npm that's pretty well-executed. Package: pino-sdk-v2 Target: Impersonates pino (one of the most popular Node.js loggers, ~20M weekl…

Fri, Mar 06, 2026, 10:57 AM UTC
comment
Comment #43896841
[dead]

Mon, May 05, 2025, 4:30 PM UTC