Hackernews posts about Mali

1. Axios compromised on NPM – Malicious versions drop remote access trojan (www.stepsecurity.io)
   1934 points by mtud 8 days ago | 807 comments
2. Malicious litellm_init.pth in litellm 1.82.8 PyPI package – credential stealer (github.com)
   739 points by theanonymousone 15 days ago | 1 comments
3. PSA: Top Google Result for Claude Code Is Malicious (onemillionwords.substack.com)
   50 points by rahulyc 24 days ago | 13 comments
4. Om Malik – 'Astound'ed. Google Flips Its Fiber to PE (om.co)
   36 points by rmason 11 days ago | 3 comments
5. Protecting Your Host from Malicious Dependencies (www.grepular.com)
   11 points by Brajeshwar 6 days ago | 5 comments
6. Google kept featuring this Chrome extension for months after it turned malicious (www.xda-developers.com)
   9 points by Doublentender 22 days ago | 1 comments
7. hid-omg-detect: Linux Driver in Development to Detect Malicious HID Devices (www.phoronix.com)
   5 points by josephcsible 2 days ago | discuss
8. The rise of malicious repositories on GitHub (rushter.com)
   5 points by yakattak 23 days ago | discuss
9. Catching malicious contributions in Datadog's open source repos (www.datadoghq.com)
   5 points by scapecast 29 days ago | discuss
10. I built a security scanner for OpenClaw after 824 malicious skills were found
    4 points by baz_sec 25 days ago | 1 comments
11. A New Linux Kernel Driver Wants to Catch Malicious USB Devices in the Act (itsfoss.com)
    4 points by nobody9999 2 days ago | discuss
12. Malicious NPM Packages Found in React Native – 130K+ Monthly Downloads Hit (www.stepsecurity.io)
    4 points by likhith190 23 days ago | discuss
13. "Amazing Refresh" - A Malicious Chrome Extension (scotthelme.co.uk)
    3 points by moebrowne about 15 hours ago | discuss
14. The rise of malicious repositories on GitHub (rushter.com)
    3 points by dleslie 23 days ago | discuss
15. Om Malik – The Debt Beneath the Dream (om.co)
    3 points by rmason 28 days ago | discuss
16. Malicious Packages Targeting Strapi Plugin Ecosystem Being Actively Published (safedep.io)
    2 points by birdculture 4 days ago | discuss
17. Supply Chain Attack on Axios Pulls Malicious Dependency from NPM (socket.dev)
    2 points by dsr12 8 days ago | discuss
18. Malicious IoliteLabs VSCode Extensions Target Solidity Developers with Backdoor (www.stepsecurity.io)
    2 points by kurmiashish 11 days ago | discuss
19. Show HN: Skillcop: Block malicious Claude Skills before they execute (github.com)
    2 points by bennydog224 19 days ago | discuss
20. Om Malik: Lobster Boil (om.co)
    2 points by rmason 21 days ago | discuss
21. Om Malik – Symbolic Capitalism (om.co)
    2 points by rmason 25 days ago | discuss
22. I built Warden – a free security CLI to catch malicious NPM packages (github.com)
    1 points by camilo1774 about 11 hours ago | discuss
23. Detect malicious packages by triggering their behavior in a sandbox
    1 points by RalianENG 1 day ago | discuss
24. Malicious Litellm 1.82.8: Credential Theft and Persistent Backdoor (safedep.io)
    1 points by alokDT 14 days ago | discuss
25. Maligna Kodera (krzyhau.itch.io)
    1 points by ta988 27 days ago | discuss
26. WinGet abused to deliver malicious payloads (blog.compass-security.com)
    1 points by uneven9434 28 days ago | discuss
27. Active Supply Chain Attack on axios 1.14.1
    18 points by lemax 8 days ago | 1 comments
28. Tell HN: Slow Down
    15 points by jacquesm 14 days ago | 7 comments
29. Show HN: OpenClaw-superpowers – Self-modifying skill library for OpenClaw agents (github.com)
    8 points by Arkid 24 days ago | discuss
30. Tell HN: Android blocks users from granting permissions to some apps
    4 points by basilikum 21 days ago | 2 comments