Incident Report: CVE-2024-YIKES(nesbitt.io)
658 points by miniBill | 156 comments
A satirical incident report by Andrew Nesbitt about a cascading software supply chain attack spanning JavaScript, Rust, and Python package ecosystems.
658 points by miniBill | 156 comments
A satirical incident report by Andrew Nesbitt about a cascading software supply chain attack spanning JavaScript, Rust, and Python package ecosystems.
10 points by l2dy | 1 comments
484 points by mooreds | 82 comments
Andrew Nesbitt's satirical incident report about a malicious package slipping past seven AI-powered security gates in a fictional future CVE.