NHI, AI, IAM & Cyber Security Breaches & Vulnerabilities

Could Miasma’s binding.gyp path make npm installs risky?

First post and replies  | Last post by Mr NHI, 3 months ago

How did cms-store-ren leak its own Telegram bot token?

First post and replies  | Last post by Mr NHI, 3 months ago

What breaks when Miasma hits npm build-time execution?

First post and replies  | Last post by Mr NHI, 3 months ago

Could GitHub Actions OIDC tokens widen the Shai-Hulud blast radius?

First post and replies  | Last post by Mr NHI, 3 months ago

What did the exposed GitHub token change for npm infostealers?

First post and replies  | Last post by Mr NHI, 3 months ago

Exploit chains or CVE counts: which better tracks risk?

First post and replies  | Last post by Mr NHI, 3 months ago

What did CVE-2026-41241 show about chained XSS in pretalx?

First post and replies  | Last post by Mr NHI, 3 months ago

Fake Claude Code malware: what AI developers need to change now

First post and replies  | Last post by Mr NHI, 3 months ago

How did NastyC2 use NPM installs to reach developer systems?

First post and replies  | Last post by Mr NHI, 3 months ago

How did Megalodon spread through GitHub CI/CD repositories?

First post and replies  | Last post by Mr NHI, 3 months ago