Archive

17 posts published so far

Apr 4, 2026
Axios malicious package: what developers and defenders should check
Hare Krishna Rai
Dec 1, 2025
React2shell Leads to Full Microsoft 365 SharePoint compromise: How One Server Exploit Exposed an Entire Tenant
Hare Krishna Rai
Sep 18, 2025
The Shai-Hulud Worm: Dissecting the Self-Spreading Malware Attack on the NPM Ecosystem
Hare Krishna Rai

Sep 4, 2025

From Grep to Taint Analysis: The Evolution of Static Code Scanning

Hare Krishna Rai

Aug 27, 2025

The Nx Supply Chain Attack: When AI Becomes an Accomplice Attackers

Hare Krishna Rai

Jun 21, 2025

Introduction to Static Application Security Testing (SAST)

Hare Krishna Rai

May 18, 2025

Code Smart, Code Safe: Securing AI Suggestions in Modern IDEs

Hare Krishna Rai

May 16, 2025

Threat Modeling Case Studies

Hare Krishna Rai

May 9, 2025

Boost Your Secure Code Review Efficiency with Git Grep

Hare Krishna Rai

Apr 29, 2025

Why Trusting Git Over Ctrl + Z Matters : Vibe Coding

Hare Krishna Rai

Apr 19, 2025

Slopsquatting: An Emerging Threat to Developers Using AI-Powered IDEs

Hare Krishna Rai

Mar 30, 2025

Not Just Numbers: Why Semantic Versioning (SemVer) Is Your Best Friend in Fixing Vulnerable Dependencies

Hare Krishna Rai

Jan 11, 2025

Safely Exploring Malicious NPM Packages: A Guide to Using Verdaccio for Secure Testing

Hare Krishna Rai

Jan 10, 2025

How to Publish Your First NPM Package: A Simple Beginner's Guide

Hare Krishna Rai

Dec 18, 2024

Automating Multi-Platform Tool Releases Using GitHub Actions

Hare Krishna Rai

Nov 9, 2024

Supply Chain Attack Analysis for NPM Package : llm-oracle

Hare Krishna Rai

May 10, 2023

In AWS, how to keep running processes for ssh connections that keeps breaking?

Hare Krishna Rai

Command Palette

Axios malicious package: what developers and defenders should check

React2shell Leads to Full Microsoft 365 SharePoint compromise: How One Server Exploit Exposed an Entire Tenant

The Shai-Hulud Worm: Dissecting the Self-Spreading Malware Attack on the NPM Ecosystem

From Grep to Taint Analysis: The Evolution of Static Code Scanning

The Nx Supply Chain Attack: When AI Becomes an Accomplice Attackers

Introduction to Static Application Security Testing (SAST)

Code Smart, Code Safe: Securing AI Suggestions in Modern IDEs

Threat Modeling Case Studies

Boost Your Secure Code Review Efficiency with Git Grep

Why Trusting Git Over Ctrl + Z Matters : Vibe Coding

Slopsquatting: An Emerging Threat to Developers Using AI-Powered IDEs

Not Just Numbers: Why Semantic Versioning (SemVer) Is Your Best Friend in Fixing Vulnerable Dependencies

Safely Exploring Malicious NPM Packages: A Guide to Using Verdaccio for Secure Testing

How to Publish Your First NPM Package: A Simple Beginner's Guide

Automating Multi-Platform Tool Releases Using GitHub Actions

Supply Chain Attack Analysis for NPM Package : llm-oracle

In AWS, how to keep running processes for ssh connections that keeps breaking?