Submissions from reversinglabs.com

		MCP security tracks API's playbook – we know how that ends (reversinglabs.com)
		1 point by mooreds 1 day ago \| past \| discuss
		The "Graphalgo" NPM/PyPI campaign targeting developers (Lazarus Group) (reversinglabs.com)
		2 points by NTCTech 3 months ago \| past
		Gartner's CTEM advances vulnerability management (reversinglabs.com)
		1 point by jpmellojr 7 months ago \| past
		Malware found on NPM infecting local package with reverse shell (reversinglabs.com)
		233 points by gnabgib on March 26, 2025 \| past \| 140 comments
		Malicious ML models discovered on Hugging Face platform (reversinglabs.com)
		2 points by LLcolD on Feb 6, 2025 \| past
		Fake recruiter coding tests target devs with malicious Python packages (reversinglabs.com)
		2 points by T-A on Sept 13, 2024 \| past \| 1 comment
		RoguePuppet software supply chain exposure: Lessons learned (reversinglabs.com)
		1 point by jpmellojr on July 31, 2024 \| past
		NVD delays highlight vulnerability management woes: Put malware first (reversinglabs.com)
		2 points by popey on April 29, 2024 \| past
		Malicious helpers: VS Code Extensions observed stealing sensitive information (reversinglabs.com)
		2 points by taubek on April 8, 2024 \| past
		GitHub Boosts Secrets Scanning (reversinglabs.com)
		2 points by taubek on Nov 4, 2023 \| past
		Typosquatting campaign delivers r77 rootkit via NPM (reversinglabs.com)
		1 point by skilled on Oct 5, 2023 \| past
		How to mitigate risk from secrets leaks (reversinglabs.com)
		91 points by vmatsiiako on May 27, 2023 \| past \| 55 comments
		Developers beware: Imposter HTTP libraries lurk on PyPI (reversinglabs.com)
		13 points by saikatsg on Feb 23, 2023 \| past \| 3 comments
		SentinelSneak: Malicious PyPI module poses as security software development kit (reversinglabs.com)
		2 points by rntn on Dec 21, 2022 \| past
		IconBurst NPM software supply chain attack grabs data from apps and websites (reversinglabs.com)
		1 point by taubek on July 14, 2022 \| past
		IconBurst: NPM software supply chain attack grabs data from apps, websites (reversinglabs.com)
		3 points by Caseee on July 6, 2022 \| past
		Rana Android Malware (reversinglabs.com)
		1 point by Fnoord on Dec 7, 2020 \| past
		Malware found in 725 Ruby libraries (reversinglabs.com)
		2 points by jamsb on April 21, 2020 \| past
		Mining for Malicious Ruby Gems (reversinglabs.com)
		2 points by phab on April 20, 2020 \| past
		Mining for Malicious Ruby Gems (reversinglabs.com)
		14 points by afrcnc on April 18, 2020 \| past \| 3 comments
		Mining for Malicious Ruby Gems (reversinglabs.com)
		2 points by thibaut_barrere on April 17, 2020 \| past
		Integrating Isolation with Analytics (reversinglabs.com)
		1 point by lainon on Oct 27, 2018 \| past
		Three New DDE Obfuscation Methods (reversinglabs.com)
		21 points by danso on Sept 30, 2018 \| past \| 3 comments
		Three New DDE Obfuscation Methods (reversinglabs.com)
		1 point by lainon on Sept 24, 2018 \| past

HN For You