Supply Chain Security
The Miasma Attack
How 31 Red Hat npm Packages Were Weaponized Against Developers
LF32
7 min read
Read Article
pwn@research:~$ echo 0 > /proc/sys/kernel/randomize_va_space && gdb -q
Deep dive into exploits, reversing, and digital forensics.
How 31 Red Hat npm Packages Were Weaponized Against Developers
Gods Plan

How 2,180 Developers Got Hacked By Their Own AI Assistants (And 40% Still Haven't Fixed It).
After analyzing s1ngularity, Shai-Hulud, and Qix attacks, I've adopted a paranoid approach to dependencies. Trust nothing, verify everything, even that innocent-looking npm package.
Why traditional vulnerability scanning fails against modern supply chain attacks and how zero trust principles are reshaping open source security.
Get notified when I publish new insights on software development, security research, and technology trends.