jamesberthoty

4 ms·

1. 1.▲
   by jamesberthoty 1y ago

   Several individual developers seem to have noticed it at around the same time with Step and Socket pointing to different people in their blogs. And then vendors from Socket, Aikido, and Step all seem to have detected it via their upstream m
2. 2.▲
   Shai-Hulud malware attack: Tinycolor and over 40 NPM packages compromised(socket.dev)

   1233 points by jamesberthoty 1y ago|1019 comments
3. 3.▲
   by jamesberthoty 2y ago

   Does this seem like a plausible summary? 1. tj-actions-bot PAT spoofs renovatebot commit with malicious code - probably by creating a new unprotected branch, pushing to it spoofing the renovatebot user, then deleting the branch, but we real
4. 4.▲
   Easy and Open Source Code Scanning with OpenAI(github.com)

   1 points by jamesberthoty 3y ago|1 comments
5. 5.▲
   by jamesberthoty 3y ago

   An easy way to get started testing the security scanning capabilities of OpenAI