Snyk security researcher deploys malicious NPM packages targeting cursor.com
1–10 of 331 posts
Re: Snyk security researcher deploys malicious NPM packages targeting cursor.com
#2Without more context, this doesn't look great for Snyk either way: either they have an employee using NPM to live test their own services, or they have insufficient controls/processes for performing a legitimate audit of Cursor without using public resources.
Re: Snyk security researcher deploys malicious NPM packages targeting cursor.com
#3Just a reminder that Snyk was founded by ex-IDF Unit 8200 soldiers. I would not trust them given what we've seen Israel do to supply chains.
Re: Snyk security researcher deploys malicious NPM packages targeting cursor.com
#4Looks like a white hat audit from Snyk testing. Got flagged because oastify.com is a default Burp Collaborator server.
They should be running a private npm repo for tests (not difficult to override locally) and also their own collaborator server.
Re: Snyk security researcher deploys malicious NPM packages targeting cursor.com
#5Just a reminder that Snyk was founded by ex-IDF Unit 8200 soldiers. I would not trust them given what we've seen Israel do to supply chains. https://en.wikipedia.org/wiki/Snyk
I don't have a dog in this hunt. I've never worked with Snyk, I've never been a customer, and I don't think I even know anyone who works there. That said, they've built their whole company around being trustworthy and doubt they'd knowingly do anything to risk their entire business. Also, I can hardly imagine someone better positioned to protect against supply chain attacks.
Your criticism sounds to me like "just a reminder that this armed bodyguard service comprises Navy SEALs and Army Rangers". Uh, great!
Re: Snyk security researcher deploys malicious NPM packages targeting cursor.com
#6Just a reminder that Snyk was founded by ex-IDF Unit 8200 soldiers. I would not trust them given what we've seen Israel do to supply chains. https://en.wikipedia.org/wiki/Snyk
I don't have a dog in this hunt. I've never worked with Snyk, I've never been a customer, and I don't think I even know anyone who works there. That said, they've built their whole company around being trustworthy and doubt they'd knowingly do anything to risk their entire business. Also, I can hardly imagine someone better positioned to protect against supply chain attacks. Your criticism sounds to me like "just a r…
Maybe if you change that to "armed bodyguard services employ ex KGB assassins"
Re: Snyk security researcher deploys malicious NPM packages targeting cursor.com
#7Things like this could _synk_ their reputation...
Re: Snyk security researcher deploys malicious NPM packages targeting cursor.com
#8Just a reminder that Snyk was founded by ex-IDF Unit 8200 soldiers. I would not trust them given what we've seen Israel do to supply chains. https://en.wikipedia.org/wiki/Snyk
I don't have a dog in this hunt. I've never worked with Snyk, I've never been a customer, and I don't think I even know anyone who works there. That said, they've built their whole company around being trustworthy and doubt they'd knowingly do anything to risk their entire business. Also, I can hardly imagine someone better positioned to protect against supply chain attacks. Your criticism sounds to me like "just a r…
[flagged]
Re: Snyk security researcher deploys malicious NPM packages targeting cursor.com
#9Earlier quoted context omitted.
I don't have a dog in this hunt. I've never worked with Snyk, I've never been a customer, and I don't think I even know anyone who works there. That said, they've built their whole company around being trustworthy and doubt they'd knowingly do anything to risk their entire business. Also, I can hardly imagine someone better positioned to protect against supply chain attacks. Your criticism sounds to me like "just a r…
[flagged]
They just recently snuck bombs into a supply chain and then remotely detonated them in positions where the caused civilian injuries. I would assume the comment has nothing to do with religion/race, and everything to do with the actions taken. Even for someone that is a supporter of that government, it's hard to deny they've taken some actions that are unsupportable.
Re: Snyk security researcher deploys malicious NPM packages targeting cursor.com
#10Earlier quoted context omitted.
I don't have a dog in this hunt. I've never worked with Snyk, I've never been a customer, and I don't think I even know anyone who works there. That said, they've built their whole company around being trustworthy and doubt they'd knowingly do anything to risk their entire business. Also, I can hardly imagine someone better positioned to protect against supply chain attacks. Your criticism sounds to me like "just a r…
[flagged]
This is a tiresome motte-and-bailey argument. You are trying to conflate the OP comment with something it's not (base antisemitism).
Just like companies founded by say former operatives of the CIA, NSA, MI6, etc. would (and maybe should?) be viewed with skepticism, so too are companies founded by former members of Unit 8200.
Mentioning that Israel's military (like many others) has engaged in some less than ethical behavior is not equivalent to antisemitism. Trying to pretend otherwise is ridiculous.