Axios malicious package: what developers and defenders should check
What the Axios malicious package contained, how it was published, and how teams can check GitHub, Intune, CrowdStrike, and Jamf.
blog.harekrishnarai.me
Latest articles
React2shell Leads to Full Microsoft 365 SharePoint compromise: How One Server Exploit Exposed an Entire Tenant
The Shai-Hulud Worm: Dissecting the Self-Spreading Malware Attack on the NPM Ecosystem
From Grep to Taint Analysis: The Evolution of Static Code Scanning
The Nx Supply Chain Attack: When AI Becomes an Accomplice Attackers
Introduction to Static Application Security Testing (SAST)
Introduction This is the first article in a 30-day series on Static Application Security Testing (SAST). We’ll introduce what SAST is and why it matters for building secure software. SAST refers to analyzing source code to find security vulnerabiliti...
Code Smart, Code Safe: Securing AI Suggestions in Modern IDEs
In this article, we'll learn how to code securely with AI-assisted IDE tools like GitHub Copilot, Windsurf, and Cursor. These tools can suggest code while keeping it safe. Each one lets you set rules in its own way: Copilot uses a .github/copilot-ins...
Threat Modeling Case Studies
Web Application Case Study System Overview A web application that allows users to: Register and authenticate Upload and share files Send messages to other users View and update their profile Data Flow Diagram flowchart LR User((User)) ...
Boost Your Secure Code Review Efficiency with Git Grep
Struggling with slow, noisy searches during manual secure code reviews? You're not alone. Finding vulnerabilities like hardcoded secrets, dangerous function calls, or misconfigured access controls can feel like finding needles in haystacks—especially...
Why Trusting Git Over Ctrl + Z Matters : Vibe Coding
Find Out Why Git is a Better Choice than Ctrl + Z for Coding Success in the era of vibe coding </>
Slopsquatting: An Emerging Threat to Developers Using AI-Powered IDEs
Recently, companies are supercharging developer productivity with AI-powered IDEs and agents! Tools like GitHub Copilot and CursorAI are at the forefront of this exciting transformation, offering developers incredible coding assistance and automation...