---
title: "Hare Krishna Rai (@harekrishnarai) | Hashnode"
description: "Securing the Future of Software Supply Chains & AI. Read the latest articles by Hare Krishna Rai on Hashnode."
url: "https://hashnode.com/@harekrishnarai"
---

@harekrishnarai

# Hare Krishna Rai

@harekrishnarai · India · Joined May 2021

Securing the Future of Software Supply Chains & AI

[Website](https://harekrishnarai.me/)

### [Axios malicious package: what developers and defenders should check](https://blog.harekrishnarai.me/axios-malicious-package-detection?utm_source=hashnode&utm_medium=feed)

What the Axios malicious package contained, how it was published, and how teams can check GitHub, Intune, CrowdStrike, and Jamf.

5 min read · [blog.harekrishnarai.me](https://blog.harekrishnarai.me/axios-malicious-package-detection?utm_source=hashnode&utm_medium=feed)

[Apr 4](https://hashnode.com/posts/axios-malicious-package-detection/69d06df6e466e2b762d2c496)

### [React2shell Leads to Full Microsoft 365 SharePoint compromise: How One Server Exploit Exposed an Entire Tenant](https://blog.harekrishnarai.me/react2shell-leads-to-full-microsoft-365-sharepoint-compromise?utm_source=hashnode&utm_medium=feed)

This article covers how React2shell Led to Full Microsoft 365 SharePoint compromise : How One Server Exploit Exposed an Entire Tenant

4 min read · [blog.harekrishnarai.me](https://blog.harekrishnarai.me/react2shell-leads-to-full-microsoft-365-sharepoint-compromise?utm_source=hashnode&utm_medium=feed)

[Dec 1, 2025](https://hashnode.com/posts/react2shell-leads-to-full-microsoft-365-sharepoint-compromise/694ddb535e6c517546855926)

### [The Shai-Hulud Worm: Dissecting the Self-Spreading Malware Attack on the NPM Ecosystem](https://blog.harekrishnarai.me/the-shai-hulud-worm-dissecting-the-self-spreading-malware-attack-on-the-npm-ecosystem?utm_source=hashnode&utm_medium=feed)

Learn about the Shai-Hulud worm, a groundbreaking self-propagating malware that targeted the npm ecosystem, its impact, and protective measures

14 min read · [blog.harekrishnarai.me](https://blog.harekrishnarai.me/the-shai-hulud-worm-dissecting-the-self-spreading-malware-attack-on-the-npm-ecosystem?utm_source=hashnode&utm_medium=feed)

[Sep 18, 2025](https://hashnode.com/posts/the-shai-hulud-worm-dissecting-the-self-spreading-malware-attack-on-the-npm-ecosystem/68cc650d91b31302fa63efad)

### [From Grep to Taint Analysis: The Evolution of Static Code Scanning](https://blog.harekrishnarai.me/from-grep-to-taint-analysis-the-evolution-of-static-code-scanning?utm_source=hashnode&utm_medium=feed)

Explore the evolution of static code analysis, from simple string searches to advanced taint-aware tools like CodeQL and Checkmarx

5 min read · [blog.harekrishnarai.me](https://blog.harekrishnarai.me/from-grep-to-taint-analysis-the-evolution-of-static-code-scanning?utm_source=hashnode&utm_medium=feed)

[Sep 4, 2025](https://hashnode.com/posts/from-grep-to-taint-analysis-the-evolution-of-static-code-scanning/68b9b3be260fb367ff14feec)

### [The Nx Supply Chain Attack: When AI Becomes an Accomplice Attackers](https://blog.harekrishnarai.me/the-nx-supply-chain-attack-when-ai-becomes-an-accomplice-attackers?utm_source=hashnode&utm_medium=feed)

The Nx build system faces a supply chain attack using AI tools, exposing new cyber threat vectors for developers in 2025

8 min read · [blog.harekrishnarai.me](https://blog.harekrishnarai.me/the-nx-supply-chain-attack-when-ai-becomes-an-accomplice-attackers?utm_source=hashnode&utm_medium=feed)

[Aug 27, 2025](https://hashnode.com/posts/the-nx-supply-chain-attack-when-ai-becomes-an-accomplice-attackers/68af4ebc9c3d938c1fe43e72)