Browsing Tag
Shai-Hulud
2 posts
Inside the Chaindrop Supply Chain Attack
ChainDrop didn’t exploit a vulnerability. It stole a maintainer’s credentials, then used npm’s own publishing machinery to replicate across 1,300+ packages.
Weekly Top 10: 12.01.2025: Over 17,000 Secrets Exposed in Public GitLab Projects; Dartmouth College Confirms Data Theft in Oracle EBS Hack; OpenAI Customer Data Exposed in Mixpanel Analytics Hack, and More.
Over 17,000 Secrets Exposed in Public GitLab Projects; Dartmouth College Confirms Data Theft in Oracle EBS Hack; OpenAI Customer Data Exposed in Mixpanel Analytics Hack