aikido.dev on Hacker News

7 stories on the front page, newest first. Scroll down to watch the site change over time.

Screenshot of aikido.dev: Keyv and friends compromised in active Shai-Hulud supply chain attack

Keyv and friends compromised in active Shai-Hulud supply chain attack (aikido.dev)

238 points by cimi_ 2 months ago | 126 comments

Screenshot of aikido.dev: Aikido Code Audit

Aikido Code Audit (aikido.dev)

30 points by ilreb 4 months ago | 10 comments

Screenshot of aikido.dev: Telnyx package compromised on PyPI

Telnyx package compromised on PyPI (aikido.dev)

70 points by overflowy 7 months ago | 25 comments

Screenshot of aikido.dev: Glassworm is back: A new wave of invisible Unicode attacks hits repositories

Glassworm is back: A new wave of invisible Unicode attacks hits repositories (aikido.dev)

283 points by robinhouston 7 months ago | 169 comments

Screenshot of aikido.dev: SHA1-Hulud the Second Comming – Postman, Zapier, PostHog All Compromised via NPM

SHA1-Hulud the Second Comming – Postman, Zapier, PostHog All Compromised via NPM (aikido.dev)

317 points by birdculture 11 months ago | 98 comments

Aikido Security blog post reporting a second Shai Hulud npm supply-chain attack compromising packages from Zapier, ENS, AsyncAPI, PostHog, and Postman.

supply-chain-attack npm shai-hulud malware

Screenshot of aikido.dev: NPM debug and chalk packages compromised

NPM debug and chalk packages compromised (aikido.dev)

1287 points by universesquid 1 year ago | 699 comments

Aikido Security blog post reporting that the popular npm packages debug and chalk were compromised with malicious code in a supply-chain attack.

npm supply-chain-attack malware javascript

Screenshot pending…

Offical XRP NPM package has been compromised and key stealing malware introduced (aikido.dev)

13 points by flxga 1 year ago | 2 comments

aikido.dev on Hacker News

Keyv and friends compromised in active Shai-Hulud supply chain attack(aikido.dev)

Aikido Code Audit(aikido.dev)

Telnyx package compromised on PyPI(aikido.dev)

Glassworm is back: A new wave of invisible Unicode attacks hits repositories(aikido.dev)

SHA1-Hulud the Second Comming – Postman, Zapier, PostHog All Compromised via NPM(aikido.dev)

NPM debug and chalk packages compromised(aikido.dev)

Offical XRP NPM package has been compromised and key stealing malware introduced(aikido.dev)