Stories by varunsharma07

Ongoing NPM supply chain attack uses binding.gyp to spread like a worm

Laravel-Lang Supply Chain Attack

NX VS Code extension compromised again

Actions-cool/issues-helper GitHub Action Compromised

Malicious node-IPC Versions Published to NPM

Postmortem: TanStack NPM supply-chain compromise

Hundreds of GitHub Python Repos Compromised via Account Takeover and Force-Push

Show HN: Scan your dev machine for AI agents, MCP servers, and IDE extensions

Xygeni/xygeni-action GitHub Action is compromised – poisoned tag is still live

Hackerbot-Claw: AI Bot Exploiting GitHub Actions – Microsoft, Datadog Hit So Far

GitHub Actions is left vulnerable to supply chain attacks: Datadog Report

Cline Supply Chain Attack: Cline 2.3.0 Silently Installs OpenClaw

Harden Runner Detected the SHA1-Hulud Supply Chain Attack in CNCF's Backstage

Popular Nx Build System NPM Package Compromised with Data Stealing Malware

Suspicious Tag Change in AWS's GitHub Action: What Happened and Why It Matters

Num2words PyPI Package Compromised

eslint-config-prettier npm package compromised

Grafana GitHub Actions Security Incident

Tj-actions/changed-files GitHub Action Compromised – used by over 23K repos

CI/CD supply chain attack on Azure Karpenter Provider open-source project

1