Telnyx package compromised on PyPI(aikido.dev)

70 points by overflowy 7 months ago | 25 comments

SHA1-Hulud the Second Comming – Postman, Zapier, PostHog All Compromised via NPM(aikido.dev)

317 points by birdculture 11 months ago | 98 comments

Aikido Security blog post reporting a second Shai Hulud npm supply-chain attack compromising packages from Zapier, ENS, AsyncAPI, PostHog, and Postman.

Keyv and friends compromised in active Shai-Hulud supply chain attack(aikido.dev)

238 points by cimi_ 2 months ago | 126 comments

NixOS and reproducible builds could have detected the xz backdoor(luj.fr)

260 points by birdculture 1 year ago | 112 comments

Aikido Code Audit(aikido.dev)

30 points by ilreb 4 months ago | 10 comments

The Claude Code Source Leak: fake tools, frustration regexes, undercover mode(alex000kim.com)

1310 points by alex000kim 6 months ago | 535 comments

Blog post analyzing Claude Code's source, exposed via a source map in Anthropic's npm package, covering anti-distillation fake tools, undercover mode, and frustration regexes.