Tag feed

#open-source-security

9 posts0 followers

Explore Hashnode

Alternatives

Trending tags this week

KTKhushi Trivedikhushitrivedi.hashnode.devSep 26 · 5 min read

AI Is Writing Your Dependencies Now. Here's the New Attack Surface.

Ask an LLM to recommend a package and there is a real, measured chance it answers with one that does not exist. Someone noticed this pattern early enough to name it: Seth Larson, a developer-in-reside

0

DHDr Hernani Costaradar.firstaimovers.comMay 11 · 15 min read

Should Your Maintainer Health Rubric Change by Dependency Tier?

TL;DR: Tier your open-source maintainer health rubric by dependency blast radius and replaceability to meet EU AI Act and DORA conformity expectations. No, a single maintainer-health threshold does not work for every dependency. The verdict: you mus...

0

PNPhuoc Nguyen Dangstoryengine.hashnode.devApr 3 · 1 min read

The Spy Who Coded For Two Years — The XZ Backdoor

A state intelligence operation spent two years building trust in an open-source project. Making real contributions. Being helpful. Then they planted a backdoor to every Linux server on the internet. It was caught because one engineer noticed SSH was ...

0

VBVirusis Blogblog.virusis.comMar 24 · 4 min read

24/03/2026 Cyber Security Briefly News - Evolving Cyber Frontlines: Identity Fortification, Developer Environment Exploits, and Legal Retribution

📋 Top Headlines at a Glance RSA ID Plus Sovereign Deployment delivers full-stack identity for high-risk environments North Korea-linked threat actors abuse VS Code auto-run to spread StoatWaffle malware U.S. Sentences Russian Hacker to 6.75 Years ...

0

HHongsaysomething.hashnode.devAug 28, 2025 · 4 min read

Easyjson's Geopolitical Risk: Open Source Code and National Security Concerns

Imagine discovering that a tiny, efficient piece of code running inside thousands of U.S. Department of Defense systems—along with software in finance, healthcare, and critical infrastructure—is maintained primarily by developers in Moscow, linked to...

0

TToufiQlinuxmind.hashnode.devAug 22, 2025 · 3 min read

Best VPN for the Linux Operating System MX Linux

MX Linux has quickly become one of the most popular lightweight Linux distributions, known for its stability, efficiency, and user-friendly design. While it’s already optimized for performance and reliability, pairing it with a Virtual Private Networ...

0

HHongsaysomething.hashnode.devJun 4, 2025 · 4 min read

AI Agents in Open-Source Ecosystems: The Malicious npm Package Threat Exposed

The discovery of a malicious npm package, "xlsx-to-json-lh," which evaded detection for six years by mimicking legitimate tools, exposes critical weaknesses in open-source ecosystems. This incident arrives amid a surge in AI agent frameworks like Fac...

0

Ssansquarestarlog.sansquare.inApr 28, 2024 · 3 min read

Security Benefits of Transparency and Collaboration in Open Source Systems

Open Source Security: Embracing Transparency and Collaboration The software development landscape is in a constant state of flux, and the widespread adoption of open-source software has been a major driving force. With its freely available and modifi...

0

#open-source-security

Search Hashnode

#open-source-security

Explore Hashnode

Trending tags this week

AI Is Writing Your Dependencies Now. Here's the New Attack Surface.

Should Your Maintainer Health Rubric Change by Dependency Tier?

The Spy Who Coded For Two Years — The XZ Backdoor

24/03/2026 Cyber Security Briefly News - Evolving Cyber Frontlines: Identity Fortification, Developer Environment Exploits, and Legal Retribution

Easyjson's Geopolitical Risk: Open Source Code and National Security Concerns

Best VPN for the Linux Operating System MX Linux

AI Agents in Open-Source Ecosystems: The Malicious npm Package Threat Exposed

Security Benefits of Transparency and Collaboration in Open Source Systems